@blamejs/exceptd-skills 0.18.25 → 0.18.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/CHANGELOG.md +4 -0
  2. package/data/_indexes/_meta.json +4 -4
  3. package/data/_indexes/chains.json +80598 -9208
  4. package/data/cve-catalog.json +1601 -483
  5. package/data/framework-control-gaps.json +1134 -12
  6. package/lib/validate-package.js +5 -2
  7. package/manifest.json +53 -53
  8. package/package.json +1 -1
  9. package/sbom.cdx.json +35 -20
  10. package/scripts/check-framework-gap-coverage.js +103 -0
  11. package/scripts/predeploy.js +11 -0
package/data/framework-control-gaps.json CHANGED
@@ -240,15 +240,37 @@
240
240
  "status": "open",
241
241
  "opened_date": "2026-05-13",
242
242
  "evidence_cves": [
243
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
244
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
245
+ "CVE-2007-0671",
246
+ "CVE-2008-0015",
243
247
  "CVE-2008-4128",
248
+ "CVE-2009-0238",
249
+ "CVE-2009-0556",
250
+ "CVE-2009-1537",
251
+ "CVE-2009-3459",
252
+ "CVE-2010-0249",
253
+ "CVE-2010-0806",
254
+ "CVE-2010-3765",
255
+ "CVE-2011-3402",
256
+ "CVE-2012-1854",
244
257
  "CVE-2012-4792",
258
+ "CVE-2013-0643",
245
259
  "CVE-2013-0648",
260
+ "CVE-2013-3893",
261
+ "CVE-2013-3918",
246
262
  "CVE-2014-0497",
247
263
  "CVE-2014-0502",
248
264
  "CVE-2016-3714",
249
265
  "CVE-2017-3506",
250
266
  "CVE-2018-9276",
251
267
  "CVE-2019-16278",
268
+ "CVE-2020-13965",
269
+ "CVE-2020-17519",
270
+ "CVE-2020-7796",
271
+ "CVE-2021-21311",
272
+ "CVE-2021-26828",
273
+ "CVE-2021-26829",
252
274
  "CVE-2021-3129",
253
275
  "CVE-2022-23748",
254
276
  "CVE-2023-20273",
@@ -268,6 +290,9 @@
268
290
  "CVE-2023-41993",
269
291
  "CVE-2023-42793",
270
292
  "CVE-2023-46604",
293
+ "CVE-2023-51764",
294
+ "CVE-2023-51765",
295
+ "CVE-2023-51766",
271
296
  "CVE-2023-5217",
272
297
  "CVE-2023-6345",
273
298
  "CVE-2023-6548",
@@ -280,6 +305,8 @@
280
305
  "CVE-2024-29059",
281
306
  "CVE-2024-29988",
282
307
  "CVE-2024-30040",
308
+ "CVE-2024-3154",
309
+ "CVE-2024-37383",
283
310
  "CVE-2024-38112",
284
311
  "CVE-2024-38178",
285
312
  "CVE-2024-38189",
@@ -287,6 +314,7 @@
287
314
  "CVE-2024-38217",
288
315
  "CVE-2024-38226",
289
316
  "CVE-2024-41710",
317
+ "CVE-2024-42009",
290
318
  "CVE-2024-43461",
291
319
  "CVE-2024-43572",
292
320
  "CVE-2024-43573",
@@ -294,13 +322,62 @@
294
322
  "CVE-2024-49039",
295
323
  "CVE-2024-4947",
296
324
  "CVE-2024-55956",
325
+ "CVE-2024-56145",
297
326
  "CVE-2024-7262",
327
+ "CVE-2024-7971",
298
328
  "CVE-2024-8957",
299
329
  "CVE-2024-9463",
300
330
  "CVE-2024-9680",
301
331
  "CVE-2025-0411",
332
+ "CVE-2025-11953",
333
+ "CVE-2025-13223",
334
+ "CVE-2025-27915",
335
+ "CVE-2025-30066",
336
+ "CVE-2025-30154",
337
+ "CVE-2025-30397",
338
+ "CVE-2025-31125",
339
+ "CVE-2025-33053",
340
+ "CVE-2025-48700",
341
+ "CVE-2025-48927",
342
+ "CVE-2025-4919",
343
+ "CVE-2025-49844",
344
+ "CVE-2025-53690",
345
+ "CVE-2025-53773",
346
+ "CVE-2025-54313",
347
+ "CVE-2025-55319",
348
+ "CVE-2025-59374",
349
+ "CVE-2025-6558",
350
+ "CVE-2025-66376",
351
+ "CVE-2025-68461",
352
+ "CVE-2025-68664",
353
+ "CVE-2025-68665",
354
+ "CVE-2025-8088",
302
355
  "CVE-2026-0770",
303
- "CVE-2026-48939"
356
+ "CVE-2026-21509",
357
+ "CVE-2026-21513",
358
+ "CVE-2026-21514",
359
+ "CVE-2026-22778",
360
+ "CVE-2026-24061",
361
+ "CVE-2026-30615",
362
+ "CVE-2026-30623",
363
+ "CVE-2026-32201",
364
+ "CVE-2026-32202",
365
+ "CVE-2026-34621",
366
+ "CVE-2026-3910",
367
+ "CVE-2026-39884",
368
+ "CVE-2026-39987",
369
+ "CVE-2026-42897",
370
+ "CVE-2026-48027",
371
+ "CVE-2026-48939",
372
+ "CVE-2026-5281",
373
+ "CVE-2026-7482",
374
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
375
+ "MAL-2026-3083",
376
+ "MAL-2026-MOIKA-DEPCONFUSION",
377
+ "MAL-2026-NODE-IPC-STEALER",
378
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
379
+ "MAL-2026-TANSTACK-MINI",
380
+ "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
304
381
  ],
305
382
  "atlas_refs": [
306
383
  "AML.T0010",
@@ -335,7 +412,11 @@
335
412
  "real_requirement": "Backups cover AI-system artefacts (model weights, RAG corpora, plugin registries, AI-tool configuration files) with off-network retention; backup-integrity verification includes per-document hash comparison for RAG corpora to detect corpus poisoning; documented 'AI-system restore to last-known-good' workflow that maps to detected AI-incident classes.",
336
413
  "status": "open",
337
414
  "opened_date": "2026-05-13",
338
- "evidence_cves": [],
415
+ "evidence_cves": [
416
+ "CVE-2022-23812",
417
+ "CVE-2024-1708",
418
+ "CVE-2024-37085"
419
+ ],
339
420
  "atlas_refs": [
340
421
  "AML.T0010",
341
422
  "AML.T0020",
@@ -368,7 +449,14 @@
368
449
  "real_requirement": "MFA covers human identities at ML2+ with phishing-resistant factors (WebAuthn/passkeys, FIDO2). AI-provider credentials use short-lived OIDC tokens with mandatory rotation, never long-lived bearer keys. MCP server authentication uses signed JWTs / mTLS in production. Deepfake-grade phishing assumed; MFA decisions treat SMS/voice as insufficient.",
369
450
  "status": "open",
370
451
  "opened_date": "2026-05-13",
371
- "evidence_cves": [],
452
+ "evidence_cves": [
453
+ "CVE-2024-39891",
454
+ "CVE-2025-32975",
455
+ "CVE-2025-48928",
456
+ "CVE-2025-55241",
457
+ "CVE-2025-5777",
458
+ "CVE-2026-20182"
459
+ ],
372
460
  "atlas_refs": [
373
461
  "AML.T0055"
374
462
  ],
@@ -403,40 +491,76 @@
403
491
  "status": "open",
404
492
  "opened_date": "2026-05-13",
405
493
  "evidence_cves": [
494
+ "CVE-2008-4250",
495
+ "CVE-2010-3962",
496
+ "CVE-2011-0411",
406
497
  "CVE-2014-100005",
407
498
  "CVE-2014-2120",
499
+ "CVE-2014-3931",
500
+ "CVE-2014-6278",
408
501
  "CVE-2014-8361",
502
+ "CVE-2015-7755",
503
+ "CVE-2016-10033",
409
504
  "CVE-2016-20017",
505
+ "CVE-2016-7836",
410
506
  "CVE-2017-1000253",
507
+ "CVE-2017-1000353",
411
508
  "CVE-2017-12637",
412
509
  "CVE-2017-3066",
413
510
  "CVE-2017-6884",
511
+ "CVE-2017-7921",
414
512
  "CVE-2018-0824",
513
+ "CVE-2018-14634",
415
514
  "CVE-2018-14667",
416
515
  "CVE-2018-14933",
417
516
  "CVE-2018-15133",
418
517
  "CVE-2018-19410",
518
+ "CVE-2018-4063",
419
519
  "CVE-2018-8639",
520
+ "CVE-2019-0344",
420
521
  "CVE-2019-11001",
522
+ "CVE-2019-19006",
523
+ "CVE-2019-5418",
524
+ "CVE-2019-6693",
525
+ "CVE-2019-9621",
421
526
  "CVE-2019-9874",
422
527
  "CVE-2019-9875",
423
528
  "CVE-2020-0618",
529
+ "CVE-2020-10148",
424
530
  "CVE-2020-11023",
425
531
  "CVE-2020-14644",
426
532
  "CVE-2020-15069",
427
533
  "CVE-2020-15415",
534
+ "CVE-2020-17103-REREGRESSION-2026",
535
+ "CVE-2020-24363",
536
+ "CVE-2020-25078",
537
+ "CVE-2020-25079",
428
538
  "CVE-2020-2551",
429
539
  "CVE-2020-2883",
430
540
  "CVE-2020-3259",
541
+ "CVE-2020-9715",
431
542
  "CVE-2021-20035",
432
543
  "CVE-2021-20124",
544
+ "CVE-2021-22054",
545
+ "CVE-2021-22175",
546
+ "CVE-2021-22555",
547
+ "CVE-2021-22681",
433
548
  "CVE-2021-26086",
434
549
  "CVE-2021-27137",
550
+ "CVE-2021-30952",
551
+ "CVE-2021-31196",
552
+ "CVE-2021-32030",
553
+ "CVE-2021-33515",
435
554
  "CVE-2021-36380",
555
+ "CVE-2021-39935",
436
556
  "CVE-2021-40407",
437
557
  "CVE-2021-40655",
438
558
  "CVE-2021-41277",
559
+ "CVE-2021-43226",
560
+ "CVE-2021-43798",
561
+ "CVE-2021-44529",
439
562
  "CVE-2022-0185",
563
+ "CVE-2022-20775",
440
564
  "CVE-2022-21445",
441
565
  "CVE-2022-22071",
442
566
  "CVE-2022-22265",
@@ -444,17 +568,25 @@
444
568
  "CVE-2022-23227",
445
569
  "CVE-2022-24816",
446
570
  "CVE-2022-2586",
571
+ "CVE-2022-38028",
572
+ "CVE-2022-40799",
447
573
  "CVE-2022-43769",
448
574
  "CVE-2022-43939",
575
+ "CVE-2022-48503",
449
576
  "CVE-2022-48618",
577
+ "CVE-2023-0386",
450
578
  "CVE-2023-1671",
451
579
  "CVE-2023-20118",
580
+ "CVE-2023-21529",
452
581
  "CVE-2023-21608",
453
582
  "CVE-2023-22515",
454
583
  "CVE-2023-22518",
455
584
  "CVE-2023-22527",
456
585
  "CVE-2023-23752",
586
+ "CVE-2023-24955",
457
587
  "CVE-2023-25280",
588
+ "CVE-2023-2533",
589
+ "CVE-2023-27351",
458
590
  "CVE-2023-28229",
459
591
  "CVE-2023-28434",
460
592
  "CVE-2023-28461",
@@ -462,19 +594,24 @@
462
594
  "CVE-2023-29357",
463
595
  "CVE-2023-33063",
464
596
  "CVE-2023-33106",
597
+ "CVE-2023-33538",
465
598
  "CVE-2023-34048",
466
599
  "CVE-2023-34192",
467
600
  "CVE-2023-35082",
601
+ "CVE-2023-3519",
468
602
  "CVE-2023-35674",
469
603
  "CVE-2023-36036",
604
+ "CVE-2023-36424",
470
605
  "CVE-2023-36802",
471
606
  "CVE-2023-38203",
607
+ "CVE-2023-39780",
472
608
  "CVE-2023-40044",
473
609
  "CVE-2023-41061",
474
610
  "CVE-2023-41064",
475
611
  "CVE-2023-41265",
476
612
  "CVE-2023-41266",
477
613
  "CVE-2023-41763",
614
+ "CVE-2023-41974",
478
615
  "CVE-2023-41990",
479
616
  "CVE-2023-41991",
480
617
  "CVE-2023-41992",
@@ -482,8 +619,12 @@
482
619
  "CVE-2023-42824",
483
620
  "CVE-2023-42916",
484
621
  "CVE-2023-42917",
622
+ "CVE-2023-43000",
623
+ "CVE-2023-43208",
624
+ "CVE-2023-4346",
485
625
  "CVE-2023-43770",
486
626
  "CVE-2023-44221",
627
+ "CVE-2023-44487",
487
628
  "CVE-2023-45249",
488
629
  "CVE-2023-45727",
489
630
  "CVE-2023-46747",
@@ -493,53 +634,74 @@
493
634
  "CVE-2023-4762",
494
635
  "CVE-2023-48365",
495
636
  "CVE-2023-4863",
637
+ "CVE-2023-48788",
496
638
  "CVE-2023-49103",
497
639
  "CVE-2023-4911",
498
640
  "CVE-2023-4966",
499
641
  "CVE-2023-49897",
642
+ "CVE-2023-50387",
643
+ "CVE-2023-50868",
644
+ "CVE-2023-52163",
500
645
  "CVE-2023-5631",
501
646
  "CVE-2023-6549",
502
647
  "CVE-2023-7024",
503
648
  "CVE-2023-7028",
649
+ "CVE-2024-0012",
504
650
  "CVE-2024-0519",
651
+ "CVE-2024-0769",
505
652
  "CVE-2024-1086",
653
+ "CVE-2024-11182",
506
654
  "CVE-2024-11667",
507
655
  "CVE-2024-11680",
508
656
  "CVE-2024-1212",
509
657
  "CVE-2024-12356",
510
658
  "CVE-2024-12686",
659
+ "CVE-2024-12987",
511
660
  "CVE-2024-13159",
512
661
  "CVE-2024-13160",
513
662
  "CVE-2024-13161",
663
+ "CVE-2024-1709",
664
+ "CVE-2024-20399",
514
665
  "CVE-2024-20439",
515
666
  "CVE-2024-20767",
516
667
  "CVE-2024-20953",
668
+ "CVE-2024-21287",
517
669
  "CVE-2024-21413",
670
+ "CVE-2024-21626",
518
671
  "CVE-2024-21887",
519
672
  "CVE-2024-21893",
520
673
  "CVE-2024-23113",
521
674
  "CVE-2024-23222",
522
675
  "CVE-2024-23225",
523
676
  "CVE-2024-23296",
677
+ "CVE-2024-23897",
678
+ "CVE-2024-24919",
524
679
  "CVE-2024-26169",
525
680
  "CVE-2024-27198",
681
+ "CVE-2024-27199",
526
682
  "CVE-2024-27348",
683
+ "CVE-2024-27443",
684
+ "CVE-2024-28986",
527
685
  "CVE-2024-28995",
528
686
  "CVE-2024-29745",
529
687
  "CVE-2024-29748",
530
688
  "CVE-2024-29824",
531
689
  "CVE-2024-30051",
532
690
  "CVE-2024-30088",
691
+ "CVE-2024-3094",
533
692
  "CVE-2024-32113",
534
693
  "CVE-2024-3272",
535
694
  "CVE-2024-3273",
536
695
  "CVE-2024-3393",
537
696
  "CVE-2024-3400",
697
+ "CVE-2024-34102",
538
698
  "CVE-2024-35250",
539
699
  "CVE-2024-36401",
540
700
  "CVE-2024-36971",
701
+ "CVE-2024-37079",
541
702
  "CVE-2024-38014",
542
703
  "CVE-2024-38080",
704
+ "CVE-2024-38094",
543
705
  "CVE-2024-38106",
544
706
  "CVE-2024-38107",
545
707
  "CVE-2024-38178",
@@ -547,98 +709,292 @@
547
709
  "CVE-2024-38475",
548
710
  "CVE-2024-38812",
549
711
  "CVE-2024-38813",
712
+ "CVE-2024-38856",
713
+ "CVE-2024-4040",
714
+ "CVE-2024-40635",
550
715
  "CVE-2024-40711",
551
716
  "CVE-2024-40766",
552
717
  "CVE-2024-40890",
553
718
  "CVE-2024-40891",
554
719
  "CVE-2024-43047",
720
+ "CVE-2024-43451",
721
+ "CVE-2024-43468",
722
+ "CVE-2024-4358",
555
723
  "CVE-2024-44309",
556
724
  "CVE-2024-45195",
557
725
  "CVE-2024-45519",
726
+ "CVE-2024-4577",
558
727
  "CVE-2024-4610",
559
728
  "CVE-2024-4671",
560
729
  "CVE-2024-47575",
561
730
  "CVE-2024-4761",
562
731
  "CVE-2024-48248",
732
+ "CVE-2024-4879",
563
733
  "CVE-2024-4885",
564
734
  "CVE-2024-49035",
565
735
  "CVE-2024-49138",
566
736
  "CVE-2024-50302",
567
737
  "CVE-2024-50603",
738
+ "CVE-2024-50623",
568
739
  "CVE-2024-51378",
569
740
  "CVE-2024-51567",
741
+ "CVE-2024-5217",
570
742
  "CVE-2024-5274",
571
743
  "CVE-2024-53104",
572
744
  "CVE-2024-53150",
573
745
  "CVE-2024-53197",
574
746
  "CVE-2024-53704",
747
+ "CVE-2024-54085",
575
748
  "CVE-2024-55550",
576
749
  "CVE-2024-55591",
750
+ "CVE-2024-57726",
577
751
  "CVE-2024-57727",
752
+ "CVE-2024-57728",
578
753
  "CVE-2024-57968",
579
754
  "CVE-2024-58136",
580
755
  "CVE-2024-5910",
756
+ "CVE-2024-6670",
757
+ "CVE-2024-7399",
581
758
  "CVE-2024-7593",
759
+ "CVE-2024-7694",
582
760
  "CVE-2024-7965",
761
+ "CVE-2024-8068",
762
+ "CVE-2024-8069",
583
763
  "CVE-2024-8190",
584
764
  "CVE-2024-8956",
585
765
  "CVE-2024-9379",
586
766
  "CVE-2024-9380",
767
+ "CVE-2024-9465",
587
768
  "CVE-2024-9474",
769
+ "CVE-2024-9537",
588
770
  "CVE-2025-0108",
589
771
  "CVE-2025-0111",
772
+ "CVE-2025-0133",
590
773
  "CVE-2025-0994",
774
+ "CVE-2025-10035",
775
+ "CVE-2025-10585",
776
+ "CVE-2025-1094",
777
+ "CVE-2025-11371",
778
+ "CVE-2025-11837",
779
+ "CVE-2025-12480",
780
+ "CVE-2025-12686",
591
781
  "CVE-2025-1316",
782
+ "CVE-2025-14174",
783
+ "CVE-2025-14611",
784
+ "CVE-2025-14733",
785
+ "CVE-2025-14847",
786
+ "CVE-2025-15556",
592
787
  "CVE-2025-1976",
788
+ "CVE-2025-20281",
789
+ "CVE-2025-20333",
790
+ "CVE-2025-20337",
791
+ "CVE-2025-20352",
792
+ "CVE-2025-20362",
793
+ "CVE-2025-20393",
794
+ "CVE-2025-21042",
795
+ "CVE-2025-21043",
593
796
  "CVE-2025-21333",
594
797
  "CVE-2025-21334",
595
798
  "CVE-2025-21335",
596
799
  "CVE-2025-21418",
800
+ "CVE-2025-21479",
801
+ "CVE-2025-21480",
597
802
  "CVE-2025-21590",
803
+ "CVE-2025-22224",
804
+ "CVE-2025-22225",
805
+ "CVE-2025-22226",
598
806
  "CVE-2025-23006",
599
807
  "CVE-2025-23209",
808
+ "CVE-2025-24016",
600
809
  "CVE-2025-24054",
601
810
  "CVE-2025-24085",
811
+ "CVE-2025-24201",
602
812
  "CVE-2025-24472",
603
813
  "CVE-2025-24813",
814
+ "CVE-2025-24893",
604
815
  "CVE-2025-24983",
605
816
  "CVE-2025-24984",
606
817
  "CVE-2025-24985",
607
818
  "CVE-2025-24989",
819
+ "CVE-2025-24990",
608
820
  "CVE-2025-24991",
609
821
  "CVE-2025-24993",
610
822
  "CVE-2025-25181",
823
+ "CVE-2025-25257",
824
+ "CVE-2025-26399",
611
825
  "CVE-2025-26633",
826
+ "CVE-2025-27038",
827
+ "CVE-2025-2746",
828
+ "CVE-2025-2747",
829
+ "CVE-2025-2749",
830
+ "CVE-2025-2775",
831
+ "CVE-2025-2776",
612
832
  "CVE-2025-2783",
833
+ "CVE-2025-27920",
834
+ "CVE-2025-29635",
613
835
  "CVE-2025-29824",
614
836
  "CVE-2025-30406",
615
837
  "CVE-2025-31200",
616
838
  "CVE-2025-31201",
839
+ "CVE-2025-31277",
840
+ "CVE-2025-32432",
841
+ "CVE-2025-32433",
842
+ "CVE-2025-32463",
843
+ "CVE-2025-32701",
844
+ "CVE-2025-32706",
845
+ "CVE-2025-32709",
846
+ "CVE-2025-32756",
847
+ "CVE-2025-33073",
848
+ "CVE-2025-34026",
617
849
  "CVE-2025-34028",
850
+ "CVE-2025-35939",
851
+ "CVE-2025-37164",
852
+ "CVE-2025-38352",
618
853
  "CVE-2025-3928",
854
+ "CVE-2025-3935",
855
+ "CVE-2025-4008",
856
+ "CVE-2025-40536",
857
+ "CVE-2025-40551",
858
+ "CVE-2025-40602",
859
+ "CVE-2025-41244",
619
860
  "CVE-2025-42599",
861
+ "CVE-2025-42999",
862
+ "CVE-2025-43200",
863
+ "CVE-2025-43300",
864
+ "CVE-2025-43510",
865
+ "CVE-2025-43520",
866
+ "CVE-2025-43529",
867
+ "CVE-2025-4427",
868
+ "CVE-2025-4428",
869
+ "CVE-2025-4632",
870
+ "CVE-2025-47812",
871
+ "CVE-2025-47813",
872
+ "CVE-2025-47827",
873
+ "CVE-2025-48384",
874
+ "CVE-2025-48543",
875
+ "CVE-2025-48572",
876
+ "CVE-2025-48633",
877
+ "CVE-2025-48703",
878
+ "CVE-2025-49113",
879
+ "CVE-2025-49704",
880
+ "CVE-2025-49706",
881
+ "CVE-2025-5086",
882
+ "CVE-2025-52691",
883
+ "CVE-2025-53521",
884
+ "CVE-2025-53770",
885
+ "CVE-2025-54068",
886
+ "CVE-2025-5419",
887
+ "CVE-2025-54236",
888
+ "CVE-2025-54253",
889
+ "CVE-2025-54309",
890
+ "CVE-2025-54948",
891
+ "CVE-2025-55177",
892
+ "CVE-2025-55182",
893
+ "CVE-2025-57819",
894
+ "CVE-2025-58034",
895
+ "CVE-2025-58360",
896
+ "CVE-2025-59230",
897
+ "CVE-2025-59287",
898
+ "CVE-2025-59389",
899
+ "CVE-2025-59529",
900
+ "CVE-2025-59689",
901
+ "CVE-2025-59718",
902
+ "CVE-2025-60710",
903
+ "CVE-2025-61757",
904
+ "CVE-2025-61882",
905
+ "CVE-2025-61884",
906
+ "CVE-2025-61932",
907
+ "CVE-2025-6204",
908
+ "CVE-2025-6205",
909
+ "CVE-2025-6218",
910
+ "CVE-2025-62215",
911
+ "CVE-2025-62221",
912
+ "CVE-2025-62847",
913
+ "CVE-2025-62848",
914
+ "CVE-2025-62849",
915
+ "CVE-2025-64328",
916
+ "CVE-2025-64446",
917
+ "CVE-2025-6543",
918
+ "CVE-2025-6554",
919
+ "CVE-2025-66644",
620
920
  "CVE-2025-67038",
921
+ "CVE-2025-68613",
922
+ "CVE-2025-68645",
923
+ "CVE-2025-6965",
924
+ "CVE-2025-7775",
925
+ "CVE-2025-8110",
926
+ "CVE-2025-8875",
927
+ "CVE-2025-8876",
928
+ "CVE-2025-9242",
929
+ "CVE-2025-9377",
930
+ "CVE-2026-0300",
621
931
  "CVE-2026-12569",
932
+ "CVE-2026-1281",
933
+ "CVE-2026-1340",
622
934
  "CVE-2026-15410",
935
+ "CVE-2026-1603",
936
+ "CVE-2026-1731",
937
+ "CVE-2026-20045",
938
+ "CVE-2026-20122",
939
+ "CVE-2026-20127",
940
+ "CVE-2026-20128",
941
+ "CVE-2026-20131",
942
+ "CVE-2026-20133",
623
943
  "CVE-2026-20230",
624
944
  "CVE-2026-20253",
625
945
  "CVE-2026-20262",
946
+ "CVE-2026-20700",
947
+ "CVE-2026-20805",
948
+ "CVE-2026-20963",
949
+ "CVE-2026-21385",
950
+ "CVE-2026-21510",
951
+ "CVE-2026-21519",
952
+ "CVE-2026-21525",
953
+ "CVE-2026-21533",
954
+ "CVE-2026-21643",
955
+ "CVE-2026-22719",
956
+ "CVE-2026-22769",
957
+ "CVE-2026-23760",
958
+ "CVE-2026-2441",
959
+ "CVE-2026-24423",
960
+ "CVE-2026-24858",
626
961
  "CVE-2026-25089",
962
+ "CVE-2026-25108",
963
+ "CVE-2026-3055",
964
+ "CVE-2026-31431",
965
+ "CVE-2026-31635",
966
+ "CVE-2026-33634",
967
+ "CVE-2026-33825",
968
+ "CVE-2026-34197",
627
969
  "CVE-2026-34908",
628
970
  "CVE-2026-34909",
629
971
  "CVE-2026-34910",
972
+ "CVE-2026-3502",
973
+ "CVE-2026-35616",
974
+ "CVE-2026-3909",
630
975
  "CVE-2026-39808",
976
+ "CVE-2026-41940",
977
+ "CVE-2026-42208",
978
+ "CVE-2026-42945",
979
+ "CVE-2026-43284",
980
+ "CVE-2026-43500",
981
+ "CVE-2026-45321",
631
982
  "CVE-2026-45659",
632
983
  "CVE-2026-46817",
984
+ "CVE-2026-48282",
633
985
  "CVE-2026-48558",
634
986
  "CVE-2026-48907",
635
987
  "CVE-2026-54420",
988
+ "CVE-2026-55255",
636
989
  "CVE-2026-56155",
637
990
  "CVE-2026-56164",
638
991
  "CVE-2026-56290",
639
992
  "CVE-2026-56291",
993
+ "CVE-2026-58644",
640
994
  "CVE-2026-60137",
641
- "CVE-2026-63030"
995
+ "CVE-2026-63030",
996
+ "CVE-2026-6973",
997
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP"
642
998
  ],
643
999
  "atlas_refs": [],
644
1000
  "attack_refs": [
@@ -1539,7 +1895,12 @@
1539
1895
  "real_requirement": "A.8.16 must be extended with AI-specific monitoring: LLM API query monitoring (which processes query which APIs), behavioral baseline for expected AI tool usage patterns, alerting on AI API queries from unexpected processes or at unexpected volumes.",
1540
1896
  "status": "open",
1541
1897
  "opened_date": "2026-02-01",
1542
- "evidence_cves": [],
1898
+ "evidence_cves": [
1899
+ "CVE-2024-1212",
1900
+ "CVE-2024-12686",
1901
+ "CVE-2026-15409",
1902
+ "CVE-2026-42897"
1903
+ ],
1543
1904
  "atlas_refs": [
1544
1905
  "AML.T0096"
1545
1906
  ],
@@ -1577,8 +1938,13 @@
1577
1938
  "CVE-2022-36551",
1578
1939
  "CVE-2024-0132",
1579
1940
  "CVE-2024-21626",
1941
+ "CVE-2024-3154",
1942
+ "CVE-2024-47575",
1943
+ "CVE-2024-49039",
1944
+ "CVE-2024-9474",
1580
1945
  "CVE-2025-23266",
1581
1946
  "CVE-2025-25297",
1947
+ "CVE-2025-53767",
1582
1948
  "CVE-2025-56520",
1583
1949
  "CVE-2026-22219",
1584
1950
  "CVE-2026-7473"
@@ -1613,37 +1979,50 @@
1613
1979
  "status": "open",
1614
1980
  "opened_date": "2026-01-01",
1615
1981
  "evidence_cves": [
1982
+ "CVE-2020-29574",
1616
1983
  "CVE-2023-43472",
1617
1984
  "CVE-2023-6016",
1618
1985
  "CVE-2023-6571",
1986
+ "CVE-2024-12356",
1619
1987
  "CVE-2024-12366",
1620
1988
  "CVE-2024-24590",
1621
1989
  "CVE-2024-24591",
1622
1990
  "CVE-2024-2912",
1623
1991
  "CVE-2024-31462",
1992
+ "CVE-2024-32113",
1624
1993
  "CVE-2024-37052",
1625
1994
  "CVE-2024-37060",
1995
+ "CVE-2024-51378",
1626
1996
  "CVE-2024-5565",
1627
1997
  "CVE-2024-9526",
1628
1998
  "CVE-2025-0133",
1999
+ "CVE-2025-0994",
1629
2000
  "CVE-2025-10164",
1630
2001
  "CVE-2025-1094",
2002
+ "CVE-2025-23006",
1631
2003
  "CVE-2025-27363",
1632
2004
  "CVE-2025-27520",
1633
2005
  "CVE-2025-3248",
1634
2006
  "CVE-2025-3466",
1635
2007
  "CVE-2025-51480",
2008
+ "CVE-2025-55319",
2009
+ "CVE-2025-68664",
2010
+ "CVE-2025-68665",
1636
2011
  "CVE-2025-68668",
1637
2012
  "CVE-2025-6965",
1638
2013
  "CVE-2026-10520",
2014
+ "CVE-2026-15410",
1639
2015
  "CVE-2026-20245",
1640
2016
  "CVE-2026-21858",
1641
2017
  "CVE-2026-21877",
1642
2018
  "CVE-2026-22218",
2019
+ "CVE-2026-22778",
1643
2020
  "CVE-2026-30623",
1644
2021
  "CVE-2026-31229",
1645
2022
  "CVE-2026-31230",
1646
2023
  "CVE-2026-33017",
2024
+ "CVE-2026-39884",
2025
+ "CVE-2026-42208",
1647
2026
  "CVE-2026-42271",
1648
2027
  "CVE-2026-45247",
1649
2028
  "CVE-2026-5760"
@@ -1785,6 +2164,7 @@
1785
2164
  "CVE-2020-25078",
1786
2165
  "CVE-2020-25079",
1787
2166
  "CVE-2020-2551",
2167
+ "CVE-2020-2883",
1788
2168
  "CVE-2020-3259",
1789
2169
  "CVE-2020-7796",
1790
2170
  "CVE-2020-9715",
@@ -1805,6 +2185,7 @@
1805
2185
  "CVE-2021-3129",
1806
2186
  "CVE-2021-32030",
1807
2187
  "CVE-2021-33044",
2188
+ "CVE-2021-33045",
1808
2189
  "CVE-2021-33515",
1809
2190
  "CVE-2021-36380",
1810
2191
  "CVE-2021-38371",
@@ -1859,6 +2240,7 @@
1859
2240
  "CVE-2023-34048",
1860
2241
  "CVE-2023-34192",
1861
2242
  "CVE-2023-35082",
2243
+ "CVE-2023-3519",
1862
2244
  "CVE-2023-35674",
1863
2245
  "CVE-2023-36033",
1864
2246
  "CVE-2023-36036",
@@ -1940,6 +2322,8 @@
1940
2322
  "CVE-2024-11392",
1941
2323
  "CVE-2024-11393",
1942
2324
  "CVE-2024-11394",
2325
+ "CVE-2024-11667",
2326
+ "CVE-2024-11680",
1943
2327
  "CVE-2024-12987",
1944
2328
  "CVE-2024-13059",
1945
2329
  "CVE-2024-13159",
@@ -1954,12 +2338,14 @@
1954
2338
  "CVE-2024-20953",
1955
2339
  "CVE-2024-21287",
1956
2340
  "CVE-2024-21338",
2341
+ "CVE-2024-21413",
1957
2342
  "CVE-2024-21513",
1958
2343
  "CVE-2024-21575",
1959
2344
  "CVE-2024-21576",
1960
2345
  "CVE-2024-21762",
1961
2346
  "CVE-2024-21887",
1962
2347
  "CVE-2024-21893",
2348
+ "CVE-2024-23113",
1963
2349
  "CVE-2024-23222",
1964
2350
  "CVE-2024-23225",
1965
2351
  "CVE-2024-23296",
@@ -1972,12 +2358,15 @@
1972
2358
  "CVE-2024-27348",
1973
2359
  "CVE-2024-27443",
1974
2360
  "CVE-2024-28986",
2361
+ "CVE-2024-28987",
1975
2362
  "CVE-2024-28995",
1976
2363
  "CVE-2024-29745",
1977
2364
  "CVE-2024-29748",
1978
2365
  "CVE-2024-30051",
2366
+ "CVE-2024-30088",
1979
2367
  "CVE-2024-3273",
1980
2368
  "CVE-2024-32896",
2369
+ "CVE-2024-3400",
1981
2370
  "CVE-2024-34102",
1982
2371
  "CVE-2024-35250",
1983
2372
  "CVE-2024-36401",
@@ -1989,18 +2378,28 @@
1989
2378
  "CVE-2024-38094",
1990
2379
  "CVE-2024-38106",
1991
2380
  "CVE-2024-38107",
2381
+ "CVE-2024-38112",
1992
2382
  "CVE-2024-38178",
1993
2383
  "CVE-2024-38189",
1994
2384
  "CVE-2024-38193",
1995
2385
  "CVE-2024-38475",
2386
+ "CVE-2024-38812",
2387
+ "CVE-2024-38813",
1996
2388
  "CVE-2024-38856",
1997
2389
  "CVE-2024-39722",
1998
2390
  "CVE-2024-4040",
2391
+ "CVE-2024-40635",
2392
+ "CVE-2024-40891",
2393
+ "CVE-2024-41713",
1999
2394
  "CVE-2024-42009",
2000
2395
  "CVE-2024-42478",
2001
2396
  "CVE-2024-42479",
2397
+ "CVE-2024-43047",
2002
2398
  "CVE-2024-43468",
2399
+ "CVE-2024-43572",
2400
+ "CVE-2024-43573",
2003
2401
  "CVE-2024-4358",
2402
+ "CVE-2024-44308",
2004
2403
  "CVE-2024-44309",
2005
2404
  "CVE-2024-4610",
2006
2405
  "CVE-2024-4671",
@@ -2010,9 +2409,11 @@
2010
2409
  "CVE-2024-4885",
2011
2410
  "CVE-2024-4889",
2012
2411
  "CVE-2024-49035",
2412
+ "CVE-2024-49138",
2013
2413
  "CVE-2024-4947",
2014
2414
  "CVE-2024-50050",
2015
2415
  "CVE-2024-50302",
2416
+ "CVE-2024-50603",
2016
2417
  "CVE-2024-51567",
2017
2418
  "CVE-2024-5217",
2018
2419
  "CVE-2024-5274",
@@ -2020,6 +2421,8 @@
2020
2421
  "CVE-2024-53197",
2021
2422
  "CVE-2024-53704",
2022
2423
  "CVE-2024-54085",
2424
+ "CVE-2024-55550",
2425
+ "CVE-2024-55591",
2023
2426
  "CVE-2024-56145",
2024
2427
  "CVE-2024-57726",
2025
2428
  "CVE-2024-57727",
@@ -2038,6 +2441,7 @@
2038
2441
  "CVE-2024-8069",
2039
2442
  "CVE-2024-8190",
2040
2443
  "CVE-2024-8963",
2444
+ "CVE-2024-9380",
2041
2445
  "CVE-2024-9463",
2042
2446
  "CVE-2024-9465",
2043
2447
  "CVE-2025-0111",
@@ -2047,6 +2451,7 @@
2047
2451
  "CVE-2025-11371",
2048
2452
  "CVE-2025-11953",
2049
2453
  "CVE-2025-12480",
2454
+ "CVE-2025-12686",
2050
2455
  "CVE-2025-1316",
2051
2456
  "CVE-2025-13223",
2052
2457
  "CVE-2025-14174",
@@ -2064,6 +2469,9 @@
2064
2469
  "CVE-2025-20393",
2065
2470
  "CVE-2025-21042",
2066
2471
  "CVE-2025-21043",
2472
+ "CVE-2025-21333",
2473
+ "CVE-2025-21334",
2474
+ "CVE-2025-21335",
2067
2475
  "CVE-2025-21391",
2068
2476
  "CVE-2025-21418",
2069
2477
  "CVE-2025-21479",
@@ -2170,6 +2578,7 @@
2170
2578
  "CVE-2025-53521",
2171
2579
  "CVE-2025-53690",
2172
2580
  "CVE-2025-53770",
2581
+ "CVE-2025-53773",
2173
2582
  "CVE-2025-54068",
2174
2583
  "CVE-2025-54136",
2175
2584
  "CVE-2025-5419",
@@ -2200,6 +2609,9 @@
2200
2609
  "CVE-2025-6218",
2201
2610
  "CVE-2025-62215",
2202
2611
  "CVE-2025-62221",
2612
+ "CVE-2025-62847",
2613
+ "CVE-2025-62848",
2614
+ "CVE-2025-62849",
2203
2615
  "CVE-2025-64328",
2204
2616
  "CVE-2025-64446",
2205
2617
  "CVE-2025-64496",
@@ -2265,6 +2677,7 @@
2265
2677
  "CVE-2026-2441",
2266
2678
  "CVE-2026-24423",
2267
2679
  "CVE-2026-24858",
2680
+ "CVE-2026-25089",
2268
2681
  "CVE-2026-25108",
2269
2682
  "CVE-2026-25592",
2270
2683
  "CVE-2026-26015",
@@ -2293,10 +2706,13 @@
2293
2706
  "CVE-2026-35616",
2294
2707
  "CVE-2026-3909",
2295
2708
  "CVE-2026-3910",
2709
+ "CVE-2026-39808",
2296
2710
  "CVE-2026-40933",
2297
2711
  "CVE-2026-41091",
2298
2712
  "CVE-2026-41940",
2299
2713
  "CVE-2026-42945",
2714
+ "CVE-2026-43284",
2715
+ "CVE-2026-43500",
2300
2716
  "CVE-2026-45247",
2301
2717
  "CVE-2026-45498",
2302
2718
  "CVE-2026-45659",
@@ -2460,6 +2876,7 @@
2460
2876
  "status": "open",
2461
2877
  "opened_date": "2026-05-13",
2462
2878
  "evidence_cves": [
2879
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
2463
2880
  "CVE-2023-21237",
2464
2881
  "CVE-2023-21608",
2465
2882
  "CVE-2023-22515",
@@ -2472,6 +2889,7 @@
2472
2889
  "CVE-2023-4966",
2473
2890
  "CVE-2023-5631",
2474
2891
  "CVE-2023-7028",
2892
+ "CVE-2024-11182",
2475
2893
  "CVE-2024-21412",
2476
2894
  "CVE-2024-26169",
2477
2895
  "CVE-2024-29988",
@@ -2480,6 +2898,7 @@
2480
2898
  "CVE-2024-38094",
2481
2899
  "CVE-2024-38193",
2482
2900
  "CVE-2024-38213",
2901
+ "CVE-2024-38217",
2483
2902
  "CVE-2024-38226",
2484
2903
  "CVE-2024-43451",
2485
2904
  "CVE-2024-49039",
@@ -2489,6 +2908,13 @@
2489
2908
  "CVE-2024-55956",
2490
2909
  "CVE-2024-7971",
2491
2910
  "CVE-2025-21391",
2911
+ "CVE-2025-24016",
2912
+ "CVE-2025-27915",
2913
+ "CVE-2025-43200",
2914
+ "CVE-2025-48700",
2915
+ "CVE-2025-55177",
2916
+ "CVE-2025-59689",
2917
+ "CVE-2026-32202",
2492
2918
  "CVE-2026-39987",
2493
2919
  "CVE-2026-42208",
2494
2920
  "CVE-2026-42897",
@@ -2528,18 +2954,34 @@
2528
2954
  "status": "open",
2529
2955
  "opened_date": "2026-03-15",
2530
2956
  "evidence_cves": [
2957
+ "CVE-2007-0671",
2958
+ "CVE-2009-0238",
2959
+ "CVE-2009-0556",
2960
+ "CVE-2009-1537",
2961
+ "CVE-2010-0249",
2962
+ "CVE-2010-3765",
2963
+ "CVE-2010-3962",
2964
+ "CVE-2011-3402",
2965
+ "CVE-2012-1854",
2966
+ "CVE-2013-3918",
2531
2967
  "CVE-2017-1000253",
2532
2968
  "CVE-2018-0824",
2533
2969
  "CVE-2020-0618",
2534
2970
  "CVE-2020-15415",
2971
+ "CVE-2020-9715",
2972
+ "CVE-2021-22555",
2973
+ "CVE-2021-30952",
2535
2974
  "CVE-2021-31196",
2536
2975
  "CVE-2021-3129",
2537
2976
  "CVE-2021-41277",
2977
+ "CVE-2021-43226",
2538
2978
  "CVE-2022-0185",
2539
2979
  "CVE-2022-1471",
2540
2980
  "CVE-2022-22071",
2541
2981
  "CVE-2022-2586",
2982
+ "CVE-2022-48503",
2542
2983
  "CVE-2022-48618",
2984
+ "CVE-2023-0386",
2543
2985
  "CVE-2023-22527",
2544
2986
  "CVE-2023-28229",
2545
2987
  "CVE-2023-29300",
@@ -2551,16 +2993,19 @@
2551
2993
  "CVE-2023-35674",
2552
2994
  "CVE-2023-36033",
2553
2995
  "CVE-2023-36036",
2996
+ "CVE-2023-36424",
2554
2997
  "CVE-2023-36563",
2555
2998
  "CVE-2023-36584",
2556
2999
  "CVE-2023-36802",
2557
3000
  "CVE-2023-38831",
2558
3001
  "CVE-2023-40044",
2559
3002
  "CVE-2023-41179",
3003
+ "CVE-2023-41974",
2560
3004
  "CVE-2023-41990",
2561
3005
  "CVE-2023-4211",
2562
3006
  "CVE-2023-42916",
2563
3007
  "CVE-2023-42917",
3008
+ "CVE-2023-43000",
2564
3009
  "CVE-2023-43654",
2565
3010
  "CVE-2023-44467",
2566
3011
  "CVE-2023-46604",
@@ -2583,6 +3028,7 @@
2583
3028
  "CVE-2024-11394",
2584
3029
  "CVE-2024-13059",
2585
3030
  "CVE-2024-1561",
3031
+ "CVE-2024-1709",
2586
3032
  "CVE-2024-21338",
2587
3033
  "CVE-2024-21351",
2588
3034
  "CVE-2024-21413",
@@ -2593,10 +3039,12 @@
2593
3039
  "CVE-2024-23225",
2594
3040
  "CVE-2024-23296",
2595
3041
  "CVE-2024-27132",
3042
+ "CVE-2024-27443",
2596
3043
  "CVE-2024-29745",
2597
3044
  "CVE-2024-29748",
2598
3045
  "CVE-2024-30051",
2599
3046
  "CVE-2024-30088",
3047
+ "CVE-2024-32896",
2600
3048
  "CVE-2024-35250",
2601
3049
  "CVE-2024-36971",
2602
3050
  "CVE-2024-37032",
@@ -2616,38 +3064,93 @@
2616
3064
  "CVE-2024-50050",
2617
3065
  "CVE-2024-5274",
2618
3066
  "CVE-2024-6587",
3067
+ "CVE-2024-7399",
2619
3068
  "CVE-2024-7965",
3069
+ "CVE-2024-8068",
2620
3070
  "CVE-2024-8190",
2621
3071
  "CVE-2025-10585",
2622
3072
  "CVE-2025-1094",
3073
+ "CVE-2025-13223",
2623
3074
  "CVE-2025-14174",
2624
3075
  "CVE-2025-1550",
2625
3076
  "CVE-2025-1753",
3077
+ "CVE-2025-20337",
3078
+ "CVE-2025-21042",
3079
+ "CVE-2025-21043",
2626
3080
  "CVE-2025-23254",
2627
3081
  "CVE-2025-23266",
3082
+ "CVE-2025-24201",
3083
+ "CVE-2025-24893",
3084
+ "CVE-2025-24990",
3085
+ "CVE-2025-25257",
3086
+ "CVE-2025-26399",
3087
+ "CVE-2025-27038",
3088
+ "CVE-2025-2747",
2628
3089
  "CVE-2025-30165",
2629
3090
  "CVE-2025-30202",
3091
+ "CVE-2025-30397",
3092
+ "CVE-2025-31277",
3093
+ "CVE-2025-32432",
3094
+ "CVE-2025-32433",
2630
3095
  "CVE-2025-32434",
2631
3096
  "CVE-2025-32444",
3097
+ "CVE-2025-32706",
3098
+ "CVE-2025-32709",
3099
+ "CVE-2025-33053",
2632
3100
  "CVE-2025-33236",
2633
3101
  "CVE-2025-34291",
2634
3102
  "CVE-2025-38352",
3103
+ "CVE-2025-41244",
2635
3104
  "CVE-2025-43300",
3105
+ "CVE-2025-43510",
3106
+ "CVE-2025-43520",
3107
+ "CVE-2025-4632",
3108
+ "CVE-2025-48543",
3109
+ "CVE-2025-48633",
3110
+ "CVE-2025-4919",
2636
3111
  "CVE-2025-49596",
3112
+ "CVE-2025-53521",
3113
+ "CVE-2025-53690",
2637
3114
  "CVE-2025-54136",
3115
+ "CVE-2025-5419",
3116
+ "CVE-2025-54236",
2638
3117
  "CVE-2025-60455",
3118
+ "CVE-2025-60710",
3119
+ "CVE-2025-6205",
3120
+ "CVE-2025-6218",
3121
+ "CVE-2025-62215",
3122
+ "CVE-2025-62221",
3123
+ "CVE-2025-64328",
2639
3124
  "CVE-2025-64496",
2640
3125
  "CVE-2025-64513",
3126
+ "CVE-2025-6554",
3127
+ "CVE-2025-66376",
3128
+ "CVE-2025-66644",
2641
3129
  "CVE-2025-67818",
3130
+ "CVE-2025-7775",
2642
3131
  "CVE-2025-8747",
3132
+ "CVE-2025-8876",
3133
+ "CVE-2025-9377",
2643
3134
  "CVE-2026-0766",
3135
+ "CVE-2026-1281",
3136
+ "CVE-2026-1340",
3137
+ "CVE-2026-20045",
3138
+ "CVE-2026-20700",
3139
+ "CVE-2026-20805",
3140
+ "CVE-2026-21385",
3141
+ "CVE-2026-21510",
3142
+ "CVE-2026-21513",
3143
+ "CVE-2026-21519",
3144
+ "CVE-2026-21533",
2644
3145
  "CVE-2026-22252",
2645
3146
  "CVE-2026-22688",
3147
+ "CVE-2026-22769",
2646
3148
  "CVE-2026-24206",
2647
3149
  "CVE-2026-24207",
2648
3150
  "CVE-2026-24213",
2649
3151
  "CVE-2026-24214",
2650
3152
  "CVE-2026-24215",
3153
+ "CVE-2026-2441",
2651
3154
  "CVE-2026-25089",
2652
3155
  "CVE-2026-25592",
2653
3156
  "CVE-2026-26015",
@@ -2658,18 +3161,25 @@
2658
3161
  "CVE-2026-30624",
2659
3162
  "CVE-2026-30625",
2660
3163
  "CVE-2026-31431",
3164
+ "CVE-2026-32201",
3165
+ "CVE-2026-33825",
2661
3166
  "CVE-2026-34159",
3167
+ "CVE-2026-34621",
2662
3168
  "CVE-2026-34926",
3169
+ "CVE-2026-3909",
3170
+ "CVE-2026-3910",
2663
3171
  "CVE-2026-39808",
2664
3172
  "CVE-2026-39884",
2665
3173
  "CVE-2026-40933",
2666
3174
  "CVE-2026-41091",
3175
+ "CVE-2026-43500",
2667
3176
  "CVE-2026-45247",
2668
3177
  "CVE-2026-45321",
2669
3178
  "CVE-2026-45498",
2670
3179
  "CVE-2026-45829",
2671
3180
  "CVE-2026-46300",
2672
3181
  "CVE-2026-46333",
3182
+ "CVE-2026-5281",
2673
3183
  "CVE-2026-58644",
2674
3184
  "CVE-2026-9082",
2675
3185
  "MAL-2026-3083"
@@ -5198,17 +5708,31 @@
5198
5708
  "status": "open",
5199
5709
  "opened_date": "2026-05-13",
5200
5710
  "evidence_cves": [
5711
+ "CVE-2015-7755",
5712
+ "CVE-2016-7836",
5713
+ "CVE-2017-7921",
5201
5714
  "CVE-2018-19410",
5202
5715
  "CVE-2018-9276",
5716
+ "CVE-2019-19006",
5717
+ "CVE-2019-6693",
5718
+ "CVE-2020-24363",
5203
5719
  "CVE-2020-2883",
5204
5720
  "CVE-2020-3259",
5721
+ "CVE-2021-20124",
5722
+ "CVE-2021-22681",
5723
+ "CVE-2021-32030",
5724
+ "CVE-2021-33044",
5205
5725
  "CVE-2021-33045",
5206
5726
  "CVE-2022-1471",
5727
+ "CVE-2022-22948",
5728
+ "CVE-2022-23227",
5207
5729
  "CVE-2023-20198",
5208
5730
  "CVE-2023-20269",
5209
5731
  "CVE-2023-22515",
5210
5732
  "CVE-2023-22518",
5211
5733
  "CVE-2023-23752",
5734
+ "CVE-2023-24955",
5735
+ "CVE-2023-27351",
5212
5736
  "CVE-2023-27524",
5213
5737
  "CVE-2023-28434",
5214
5738
  "CVE-2023-29357",
@@ -5219,37 +5743,92 @@
5219
5743
  "CVE-2023-42793",
5220
5744
  "CVE-2023-43654",
5221
5745
  "CVE-2023-43791",
5746
+ "CVE-2023-45249",
5222
5747
  "CVE-2023-46747",
5223
5748
  "CVE-2023-46748",
5224
5749
  "CVE-2023-47117",
5225
5750
  "CVE-2023-48022",
5226
5751
  "CVE-2023-4966",
5752
+ "CVE-2023-50224",
5753
+ "CVE-2023-52163",
5227
5754
  "CVE-2023-6019",
5228
5755
  "CVE-2023-6021",
5229
5756
  "CVE-2023-6448",
5230
5757
  "CVE-2023-6548",
5758
+ "CVE-2023-7028",
5231
5759
  "CVE-2024-0012",
5232
5760
  "CVE-2024-12776",
5761
+ "CVE-2024-1709",
5762
+ "CVE-2024-20399",
5233
5763
  "CVE-2024-21410",
5764
+ "CVE-2024-28986",
5765
+ "CVE-2024-28987",
5234
5766
  "CVE-2024-28995",
5767
+ "CVE-2024-3272",
5235
5768
  "CVE-2024-4358",
5236
5769
  "CVE-2024-45195",
5237
5770
  "CVE-2024-4889",
5238
5771
  "CVE-2024-49138",
5772
+ "CVE-2024-54085",
5773
+ "CVE-2024-57726",
5239
5774
  "CVE-2024-57727",
5240
5775
  "CVE-2024-6587",
5241
5776
  "CVE-2024-7593",
5242
5777
  "CVE-2024-8956",
5778
+ "CVE-2024-9463",
5779
+ "CVE-2024-9465",
5780
+ "CVE-2025-10725",
5781
+ "CVE-2025-12480",
5243
5782
  "CVE-2025-1796",
5783
+ "CVE-2025-20281",
5784
+ "CVE-2025-20337",
5785
+ "CVE-2025-20362",
5786
+ "CVE-2025-21085",
5787
+ "CVE-2025-2746",
5788
+ "CVE-2025-2747",
5789
+ "CVE-2025-32433",
5790
+ "CVE-2025-32975",
5791
+ "CVE-2025-34026",
5792
+ "CVE-2025-3935",
5793
+ "CVE-2025-40536",
5794
+ "CVE-2025-40602",
5795
+ "CVE-2025-4427",
5796
+ "CVE-2025-48700",
5797
+ "CVE-2025-48928",
5798
+ "CVE-2025-49113",
5799
+ "CVE-2025-49706",
5800
+ "CVE-2025-53767",
5801
+ "CVE-2025-54236",
5802
+ "CVE-2025-54309",
5803
+ "CVE-2025-55241",
5804
+ "CVE-2025-5777",
5805
+ "CVE-2025-57819",
5806
+ "CVE-2025-59718",
5807
+ "CVE-2025-61757",
5244
5808
  "CVE-2025-64513",
5245
5809
  "CVE-2025-69286",
5246
5810
  "CVE-2026-0257",
5811
+ "CVE-2026-1603",
5812
+ "CVE-2026-1731",
5813
+ "CVE-2026-20127",
5814
+ "CVE-2026-20128",
5815
+ "CVE-2026-20182",
5247
5816
  "CVE-2026-20245",
5817
+ "CVE-2026-21533",
5818
+ "CVE-2026-22769",
5819
+ "CVE-2026-23760",
5248
5820
  "CVE-2026-24206",
5249
5821
  "CVE-2026-24207",
5822
+ "CVE-2026-24858",
5250
5823
  "CVE-2026-26190",
5824
+ "CVE-2026-3055",
5825
+ "CVE-2026-33634",
5826
+ "CVE-2026-39987",
5827
+ "CVE-2026-41940",
5251
5828
  "CVE-2026-41947",
5252
5829
  "CVE-2026-41950",
5830
+ "CVE-2026-42208",
5831
+ "CVE-2026-46817",
5253
5832
  "CVE-2026-50751",
5254
5833
  "CVE-2026-55255",
5255
5834
  "CVE-2026-56155",
@@ -5289,23 +5868,39 @@
5289
5868
  "status": "open",
5290
5869
  "opened_date": "2026-05-13",
5291
5870
  "evidence_cves": [
5871
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
5292
5872
  "CVE-2014-2120",
5873
+ "CVE-2018-14933",
5874
+ "CVE-2020-10148",
5293
5875
  "CVE-2020-13965",
5294
5876
  "CVE-2023-29360",
5295
5877
  "CVE-2023-34048",
5296
5878
  "CVE-2023-36025",
5297
5879
  "CVE-2023-41265",
5298
5880
  "CVE-2023-41266",
5881
+ "CVE-2023-48788",
5882
+ "CVE-2023-51766",
5299
5883
  "CVE-2023-5631",
5884
+ "CVE-2024-20359",
5300
5885
  "CVE-2024-21351",
5301
5886
  "CVE-2024-21412",
5302
5887
  "CVE-2024-21887",
5303
5888
  "CVE-2024-23897",
5304
5889
  "CVE-2024-24919",
5305
5890
  "CVE-2024-38094",
5891
+ "CVE-2024-38193",
5892
+ "CVE-2024-38213",
5306
5893
  "CVE-2024-41710",
5894
+ "CVE-2024-43461",
5307
5895
  "CVE-2024-49039",
5308
- "CVE-2025-0994"
5896
+ "CVE-2024-4947",
5897
+ "CVE-2024-55956",
5898
+ "CVE-2024-57728",
5899
+ "CVE-2024-6670",
5900
+ "CVE-2025-0994",
5901
+ "CVE-2025-24016",
5902
+ "CVE-2025-27915",
5903
+ "CVE-2026-32202"
5309
5904
  ],
5310
5905
  "atlas_refs": [
5311
5906
  "AML.T0096",
@@ -5344,11 +5939,20 @@
5344
5939
  "evidence_cves": [
5345
5940
  "CVE-2023-41061",
5346
5941
  "CVE-2023-41064",
5942
+ "CVE-2023-44487",
5943
+ "CVE-2024-1708",
5347
5944
  "CVE-2024-20481",
5348
5945
  "CVE-2024-3393",
5946
+ "CVE-2024-37085",
5947
+ "CVE-2024-40766",
5948
+ "CVE-2024-4577",
5349
5949
  "CVE-2024-51567",
5350
5950
  "CVE-2025-21391",
5351
- "CVE-2025-21418"
5951
+ "CVE-2025-21418",
5952
+ "CVE-2025-59389",
5953
+ "CVE-2025-61882",
5954
+ "CVE-2025-8671",
5955
+ "CVE-2026-21525"
5352
5956
  ],
5353
5957
  "atlas_refs": [],
5354
5958
  "attack_refs": [
@@ -5553,7 +6157,9 @@
5553
6157
  "real_requirement": "CAF B5 + signaling-anomaly detection + gNB firmware attestation outcome test + slice-isolation outcome test.",
5554
6158
  "status": "open",
5555
6159
  "opened_date": "2026-05-15",
5556
- "evidence_cves": [],
6160
+ "evidence_cves": [
6161
+ "CVE-2023-50387"
6162
+ ],
5557
6163
  "atlas_refs": [],
5558
6164
  "attack_refs": [
5559
6165
  "T1199",
@@ -6456,12 +7062,21 @@
6456
7062
  "status": "open",
6457
7063
  "opened_date": "2026-05-15",
6458
7064
  "evidence_cves": [
7065
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
7066
+ "CVE-2008-0015",
7067
+ "CVE-2009-3459",
6459
7068
  "CVE-2012-4792",
6460
7069
  "CVE-2013-0643",
6461
7070
  "CVE-2013-0648",
7071
+ "CVE-2013-3893",
6462
7072
  "CVE-2014-0497",
7073
+ "CVE-2014-0502",
7074
+ "CVE-2014-100005",
7075
+ "CVE-2014-6278",
7076
+ "CVE-2016-10033",
6463
7077
  "CVE-2017-12637",
6464
7078
  "CVE-2017-3066",
7079
+ "CVE-2018-14634",
6465
7080
  "CVE-2018-14667",
6466
7081
  "CVE-2018-14933",
6467
7082
  "CVE-2018-15133",
@@ -6470,6 +7085,8 @@
6470
7085
  "CVE-2018-9276",
6471
7086
  "CVE-2019-0344",
6472
7087
  "CVE-2019-11001",
7088
+ "CVE-2019-5418",
7089
+ "CVE-2019-9621",
6473
7090
  "CVE-2019-9874",
6474
7091
  "CVE-2019-9875",
6475
7092
  "CVE-2020-11023",
@@ -6478,18 +7095,24 @@
6478
7095
  "CVE-2020-2551",
6479
7096
  "CVE-2020-29574",
6480
7097
  "CVE-2020-3259",
7098
+ "CVE-2020-7796",
6481
7099
  "CVE-2021-26086",
7100
+ "CVE-2021-32030",
7101
+ "CVE-2021-43798",
6482
7102
  "CVE-2021-44207",
6483
7103
  "CVE-2021-44529",
6484
7104
  "CVE-2022-21445",
6485
7105
  "CVE-2022-22265",
6486
7106
  "CVE-2022-23227",
6487
7107
  "CVE-2022-24816",
7108
+ "CVE-2022-38028",
7109
+ "CVE-2022-40799",
6488
7110
  "CVE-2022-43769",
6489
7111
  "CVE-2022-43939",
6490
7112
  "CVE-2023-1671",
6491
7113
  "CVE-2023-20118",
6492
7114
  "CVE-2023-23752",
7115
+ "CVE-2023-2533",
6493
7116
  "CVE-2023-27524",
6494
7117
  "CVE-2023-28461",
6495
7118
  "CVE-2023-34192",
@@ -6506,6 +7129,7 @@
6506
7129
  "CVE-2023-5217",
6507
7130
  "CVE-2023-6571",
6508
7131
  "CVE-2024-0012",
7132
+ "CVE-2024-0769",
6509
7133
  "CVE-2024-11680",
6510
7134
  "CVE-2024-12366",
6511
7135
  "CVE-2024-12686",
@@ -6524,17 +7148,22 @@
6524
7148
  "CVE-2024-2912",
6525
7149
  "CVE-2024-29824",
6526
7150
  "CVE-2024-32113",
7151
+ "CVE-2024-3272",
6527
7152
  "CVE-2024-34102",
6528
7153
  "CVE-2024-36401",
7154
+ "CVE-2024-38178",
7155
+ "CVE-2024-38189",
6529
7156
  "CVE-2024-38475",
6530
7157
  "CVE-2024-38813",
6531
7158
  "CVE-2024-40890",
6532
7159
  "CVE-2024-40891",
6533
7160
  "CVE-2024-41710",
6534
7161
  "CVE-2024-41713",
7162
+ "CVE-2024-42009",
6535
7163
  "CVE-2024-43047",
6536
7164
  "CVE-2024-43093",
6537
7165
  "CVE-2024-43461",
7166
+ "CVE-2024-43468",
6538
7167
  "CVE-2024-43572",
6539
7168
  "CVE-2024-43573",
6540
7169
  "CVE-2024-44308",
@@ -6552,11 +7181,13 @@
6552
7181
  "CVE-2024-53197",
6553
7182
  "CVE-2024-55550",
6554
7183
  "CVE-2024-5565",
7184
+ "CVE-2024-56145",
6555
7185
  "CVE-2024-57727",
6556
7186
  "CVE-2024-57968",
6557
7187
  "CVE-2024-58136",
6558
7188
  "CVE-2024-6670",
6559
7189
  "CVE-2024-7593",
7190
+ "CVE-2024-7694",
6560
7191
  "CVE-2024-8956",
6561
7192
  "CVE-2024-8957",
6562
7193
  "CVE-2024-9379",
@@ -6565,10 +7196,18 @@
6565
7196
  "CVE-2024-9537",
6566
7197
  "CVE-2025-0111",
6567
7198
  "CVE-2025-0411",
7199
+ "CVE-2025-12480",
7200
+ "CVE-2025-12686",
7201
+ "CVE-2025-14611",
7202
+ "CVE-2025-14847",
7203
+ "CVE-2025-21085",
6568
7204
  "CVE-2025-21333",
6569
7205
  "CVE-2025-21334",
6570
7206
  "CVE-2025-21335",
6571
7207
  "CVE-2025-21418",
7208
+ "CVE-2025-21479",
7209
+ "CVE-2025-21480",
7210
+ "CVE-2025-22226",
6572
7211
  "CVE-2025-23006",
6573
7212
  "CVE-2025-23209",
6574
7213
  "CVE-2025-24054",
@@ -6582,20 +7221,60 @@
6582
7221
  "CVE-2025-24993",
6583
7222
  "CVE-2025-25181",
6584
7223
  "CVE-2025-26633",
7224
+ "CVE-2025-2749",
6585
7225
  "CVE-2025-27520",
7226
+ "CVE-2025-2775",
7227
+ "CVE-2025-2776",
6586
7228
  "CVE-2025-2783",
6587
7229
  "CVE-2025-29824",
6588
7230
  "CVE-2025-30406",
6589
7231
  "CVE-2025-31200",
6590
7232
  "CVE-2025-31201",
7233
+ "CVE-2025-32463",
7234
+ "CVE-2025-32701",
7235
+ "CVE-2025-32975",
6591
7236
  "CVE-2025-34028",
6592
7237
  "CVE-2025-3466",
7238
+ "CVE-2025-35939",
6593
7239
  "CVE-2025-3928",
7240
+ "CVE-2025-40536",
7241
+ "CVE-2025-40551",
6594
7242
  "CVE-2025-42599",
7243
+ "CVE-2025-43529",
7244
+ "CVE-2025-4427",
6595
7245
  "CVE-2025-47729",
7246
+ "CVE-2025-47813",
7247
+ "CVE-2025-47827",
7248
+ "CVE-2025-48384",
7249
+ "CVE-2025-48572",
7250
+ "CVE-2025-48703",
7251
+ "CVE-2025-48928",
7252
+ "CVE-2025-49113",
7253
+ "CVE-2025-53773",
7254
+ "CVE-2025-54068",
7255
+ "CVE-2025-54253",
7256
+ "CVE-2025-59230",
7257
+ "CVE-2025-59374",
7258
+ "CVE-2025-6204",
7259
+ "CVE-2025-62847",
7260
+ "CVE-2025-62849",
7261
+ "CVE-2025-6558",
7262
+ "CVE-2025-68461",
7263
+ "CVE-2025-68613",
7264
+ "CVE-2025-8088",
7265
+ "CVE-2025-8110",
7266
+ "CVE-2025-8875",
6596
7267
  "CVE-2026-0300",
6597
7268
  "CVE-2026-12569",
6598
7269
  "CVE-2026-20253",
7270
+ "CVE-2026-20963",
7271
+ "CVE-2026-21509",
7272
+ "CVE-2026-21514",
7273
+ "CVE-2026-21643",
7274
+ "CVE-2026-22719",
7275
+ "CVE-2026-3055",
7276
+ "CVE-2026-33634",
7277
+ "CVE-2026-34197",
6599
7278
  "CVE-2026-42945",
6600
7279
  "CVE-2026-45659",
6601
7280
  "CVE-2026-46817",
@@ -7280,22 +7959,28 @@
7280
7959
  "CVE-2023-36584",
7281
7960
  "CVE-2024-21351",
7282
7961
  "CVE-2024-21412",
7962
+ "CVE-2024-26169",
7283
7963
  "CVE-2024-29988",
7284
7964
  "CVE-2024-30040",
7285
7965
  "CVE-2024-38213",
7286
7966
  "CVE-2024-38217",
7287
7967
  "CVE-2024-38226",
7288
7968
  "CVE-2024-43461",
7969
+ "CVE-2024-45519",
7289
7970
  "CVE-2024-4978",
7290
7971
  "CVE-2024-53104",
7291
7972
  "CVE-2024-7262",
7973
+ "CVE-2024-9680",
7974
+ "CVE-2025-0411",
7292
7975
  "CVE-2025-11837",
7293
7976
  "CVE-2025-30400",
7294
7977
  "CVE-2026-11645",
7295
7978
  "CVE-2026-32202",
7296
7979
  "CVE-2026-33825",
7297
7980
  "CVE-2026-56290",
7298
- "CVE-2026-6973"
7981
+ "CVE-2026-6973",
7982
+ "MAL-2026-NODE-IPC-STEALER",
7983
+ "MAL-2026-TANSTACK-MINI"
7299
7984
  ],
7300
7985
  "atlas_refs": [],
7301
7986
  "attack_refs": [
@@ -7417,58 +8102,123 @@
7417
8102
  "status": "open",
7418
8103
  "opened_date": "2026-05-17",
7419
8104
  "evidence_cves": [
8105
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
8106
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
8107
+ "CVE-2007-0671",
8108
+ "CVE-2008-0015",
8109
+ "CVE-2008-4128",
8110
+ "CVE-2008-4250",
8111
+ "CVE-2009-0238",
8112
+ "CVE-2009-0556",
8113
+ "CVE-2009-1537",
8114
+ "CVE-2009-3459",
8115
+ "CVE-2010-0249",
8116
+ "CVE-2010-0806",
8117
+ "CVE-2010-3765",
8118
+ "CVE-2010-3962",
7420
8119
  "CVE-2011-0411",
8120
+ "CVE-2011-3402",
8121
+ "CVE-2012-1854",
8122
+ "CVE-2012-4792",
7421
8123
  "CVE-2013-0643",
8124
+ "CVE-2013-0648",
8125
+ "CVE-2013-3893",
8126
+ "CVE-2013-3918",
8127
+ "CVE-2014-0497",
7422
8128
  "CVE-2014-0502",
8129
+ "CVE-2014-100005",
8130
+ "CVE-2014-3931",
8131
+ "CVE-2014-6278",
7423
8132
  "CVE-2014-8361",
8133
+ "CVE-2016-10033",
7424
8134
  "CVE-2016-20017",
7425
8135
  "CVE-2016-3714",
7426
8136
  "CVE-2017-1000253",
8137
+ "CVE-2017-1000353",
7427
8138
  "CVE-2017-12637",
7428
8139
  "CVE-2017-3066",
7429
8140
  "CVE-2017-3506",
7430
8141
  "CVE-2017-6884",
8142
+ "CVE-2018-0824",
8143
+ "CVE-2018-14634",
7431
8144
  "CVE-2018-14667",
7432
8145
  "CVE-2018-15133",
8146
+ "CVE-2018-4063",
7433
8147
  "CVE-2018-8639",
7434
8148
  "CVE-2019-0344",
8149
+ "CVE-2019-11001",
7435
8150
  "CVE-2019-16278",
8151
+ "CVE-2019-5418",
8152
+ "CVE-2019-7256",
8153
+ "CVE-2019-9621",
7436
8154
  "CVE-2019-9874",
7437
8155
  "CVE-2019-9875",
8156
+ "CVE-2020-0618",
7438
8157
  "CVE-2020-11023",
8158
+ "CVE-2020-14644",
7439
8159
  "CVE-2020-15069",
7440
8160
  "CVE-2020-15415",
8161
+ "CVE-2020-17103-REREGRESSION-2026",
7441
8162
  "CVE-2020-17519",
8163
+ "CVE-2020-25078",
8164
+ "CVE-2020-25079",
7442
8165
  "CVE-2020-2551",
7443
8166
  "CVE-2020-29574",
8167
+ "CVE-2020-7796",
8168
+ "CVE-2020-9715",
7444
8169
  "CVE-2021-20035",
8170
+ "CVE-2021-20123",
8171
+ "CVE-2021-21311",
8172
+ "CVE-2021-22054",
8173
+ "CVE-2021-22175",
8174
+ "CVE-2021-22555",
7445
8175
  "CVE-2021-26086",
8176
+ "CVE-2021-26828",
8177
+ "CVE-2021-26829",
7446
8178
  "CVE-2021-27137",
8179
+ "CVE-2021-30952",
8180
+ "CVE-2021-31196",
7447
8181
  "CVE-2021-3129",
7448
8182
  "CVE-2021-33515",
7449
8183
  "CVE-2021-36380",
7450
8184
  "CVE-2021-38371",
8185
+ "CVE-2021-39935",
8186
+ "CVE-2021-40407",
8187
+ "CVE-2021-40655",
8188
+ "CVE-2021-41277",
8189
+ "CVE-2021-43226",
8190
+ "CVE-2021-43798",
7451
8191
  "CVE-2021-44207",
7452
8192
  "CVE-2021-44529",
8193
+ "CVE-2022-0185",
7453
8194
  "CVE-2022-0492",
8195
+ "CVE-2022-20775",
7454
8196
  "CVE-2022-21445",
7455
8197
  "CVE-2022-22071",
7456
8198
  "CVE-2022-22265",
7457
8199
  "CVE-2022-23748",
7458
8200
  "CVE-2022-23812",
8201
+ "CVE-2022-24816",
8202
+ "CVE-2022-2586",
7459
8203
  "CVE-2022-36551",
8204
+ "CVE-2022-37055",
7460
8205
  "CVE-2022-38028",
8206
+ "CVE-2022-40799",
7461
8207
  "CVE-2022-43769",
7462
8208
  "CVE-2022-43939",
8209
+ "CVE-2022-48503",
7463
8210
  "CVE-2022-48618",
8211
+ "CVE-2023-0386",
7464
8212
  "CVE-2023-1671",
7465
8213
  "CVE-2023-20109",
7466
8214
  "CVE-2023-20118",
7467
8215
  "CVE-2023-20273",
7468
8216
  "CVE-2023-21237",
8217
+ "CVE-2023-21529",
7469
8218
  "CVE-2023-21608",
7470
8219
  "CVE-2023-22527",
7471
8220
  "CVE-2023-25280",
8221
+ "CVE-2023-2533",
7472
8222
  "CVE-2023-26369",
7473
8223
  "CVE-2023-28229",
7474
8224
  "CVE-2023-28461",
@@ -7478,10 +8228,13 @@
7478
8228
  "CVE-2023-33106",
7479
8229
  "CVE-2023-33107",
7480
8230
  "CVE-2023-33246",
8231
+ "CVE-2023-33538",
7481
8232
  "CVE-2023-34192",
8233
+ "CVE-2023-3519",
7482
8234
  "CVE-2023-35674",
7483
8235
  "CVE-2023-36033",
7484
8236
  "CVE-2023-36036",
8237
+ "CVE-2023-36424",
7485
8238
  "CVE-2023-36584",
7486
8239
  "CVE-2023-36802",
7487
8240
  "CVE-2023-36844",
@@ -7490,9 +8243,12 @@
7490
8243
  "CVE-2023-36851",
7491
8244
  "CVE-2023-38203",
7492
8245
  "CVE-2023-38831",
8246
+ "CVE-2023-38950",
8247
+ "CVE-2023-39780",
7493
8248
  "CVE-2023-40044",
7494
8249
  "CVE-2023-41179",
7495
8250
  "CVE-2023-41763",
8251
+ "CVE-2023-41974",
7496
8252
  "CVE-2023-41990",
7497
8253
  "CVE-2023-41991",
7498
8254
  "CVE-2023-41992",
@@ -7501,7 +8257,10 @@
7501
8257
  "CVE-2023-42824",
7502
8258
  "CVE-2023-42916",
7503
8259
  "CVE-2023-42917",
8260
+ "CVE-2023-43000",
8261
+ "CVE-2023-43208",
7504
8262
  "CVE-2023-4346",
8263
+ "CVE-2023-43472",
7505
8264
  "CVE-2023-43770",
7506
8265
  "CVE-2023-43791",
7507
8266
  "CVE-2023-44221",
@@ -7518,7 +8277,10 @@
7518
8277
  "CVE-2023-49103",
7519
8278
  "CVE-2023-4911",
7520
8279
  "CVE-2023-49897",
8280
+ "CVE-2023-50868",
7521
8281
  "CVE-2023-51449",
8282
+ "CVE-2023-51764",
8283
+ "CVE-2023-51765",
7522
8284
  "CVE-2023-5217",
7523
8285
  "CVE-2023-6016",
7524
8286
  "CVE-2023-6038",
@@ -7530,7 +8292,10 @@
7530
8292
  "CVE-2024-0129",
7531
8293
  "CVE-2024-0132",
7532
8294
  "CVE-2024-0519",
8295
+ "CVE-2024-0769",
8296
+ "CVE-2024-1086",
7533
8297
  "CVE-2024-11120",
8298
+ "CVE-2024-11182",
7534
8299
  "CVE-2024-11392",
7535
8300
  "CVE-2024-11393",
7536
8301
  "CVE-2024-11394",
@@ -7541,11 +8306,13 @@
7541
8306
  "CVE-2024-12366",
7542
8307
  "CVE-2024-12450",
7543
8308
  "CVE-2024-12686",
8309
+ "CVE-2024-12987",
7544
8310
  "CVE-2024-13059",
7545
8311
  "CVE-2024-13159",
7546
8312
  "CVE-2024-13160",
7547
8313
  "CVE-2024-13161",
7548
8314
  "CVE-2024-1561",
8315
+ "CVE-2024-20353",
7549
8316
  "CVE-2024-20439",
7550
8317
  "CVE-2024-20767",
7551
8318
  "CVE-2024-20953",
@@ -7556,33 +8323,51 @@
7556
8323
  "CVE-2024-21513",
7557
8324
  "CVE-2024-21575",
7558
8325
  "CVE-2024-21576",
8326
+ "CVE-2024-21626",
7559
8327
  "CVE-2024-21762",
7560
8328
  "CVE-2024-21893",
7561
8329
  "CVE-2024-23113",
7562
8330
  "CVE-2024-23222",
7563
8331
  "CVE-2024-23225",
7564
8332
  "CVE-2024-23296",
8333
+ "CVE-2024-23692",
7565
8334
  "CVE-2024-24590",
7566
8335
  "CVE-2024-24591",
8336
+ "CVE-2024-26169",
7567
8337
  "CVE-2024-27132",
7568
8338
  "CVE-2024-27198",
8339
+ "CVE-2024-27199",
7569
8340
  "CVE-2024-27348",
8341
+ "CVE-2024-27443",
7570
8342
  "CVE-2024-29059",
7571
8343
  "CVE-2024-2912",
8344
+ "CVE-2024-29745",
7572
8345
  "CVE-2024-29748",
7573
8346
  "CVE-2024-29824",
7574
8347
  "CVE-2024-29988",
8348
+ "CVE-2024-30040",
8349
+ "CVE-2024-30051",
7575
8350
  "CVE-2024-30088",
8351
+ "CVE-2024-3094",
7576
8352
  "CVE-2024-31462",
8353
+ "CVE-2024-3154",
7577
8354
  "CVE-2024-32113",
8355
+ "CVE-2024-3273",
7578
8356
  "CVE-2024-32896",
7579
8357
  "CVE-2024-3400",
8358
+ "CVE-2024-34102",
8359
+ "CVE-2024-35250",
7580
8360
  "CVE-2024-36401",
8361
+ "CVE-2024-36971",
7581
8362
  "CVE-2024-37032",
7582
8363
  "CVE-2024-37052",
7583
8364
  "CVE-2024-37060",
8365
+ "CVE-2024-37079",
7584
8366
  "CVE-2024-37383",
8367
+ "CVE-2024-38014",
8368
+ "CVE-2024-38080",
7585
8369
  "CVE-2024-38106",
8370
+ "CVE-2024-38107",
7586
8371
  "CVE-2024-38112",
7587
8372
  "CVE-2024-38178",
7588
8373
  "CVE-2024-38189",
@@ -7594,32 +8379,41 @@
7594
8379
  "CVE-2024-38856",
7595
8380
  "CVE-2024-39717",
7596
8381
  "CVE-2024-39722",
8382
+ "CVE-2024-39891",
7597
8383
  "CVE-2024-4040",
8384
+ "CVE-2024-40635",
7598
8385
  "CVE-2024-40711",
7599
8386
  "CVE-2024-40890",
7600
8387
  "CVE-2024-40891",
7601
8388
  "CVE-2024-41713",
8389
+ "CVE-2024-42009",
7602
8390
  "CVE-2024-42478",
7603
8391
  "CVE-2024-42479",
7604
8392
  "CVE-2024-43047",
7605
8393
  "CVE-2024-43093",
7606
8394
  "CVE-2024-43451",
8395
+ "CVE-2024-43468",
7607
8396
  "CVE-2024-43572",
7608
8397
  "CVE-2024-43573",
7609
8398
  "CVE-2024-44308",
7610
8399
  "CVE-2024-44309",
7611
8400
  "CVE-2024-45519",
7612
8401
  "CVE-2024-4610",
8402
+ "CVE-2024-4671",
7613
8403
  "CVE-2024-47575",
7614
8404
  "CVE-2024-4761",
7615
8405
  "CVE-2024-48248",
8406
+ "CVE-2024-4879",
7616
8407
  "CVE-2024-4885",
7617
8408
  "CVE-2024-49035",
8409
+ "CVE-2024-4978",
7618
8410
  "CVE-2024-50050",
7619
8411
  "CVE-2024-50302",
7620
8412
  "CVE-2024-50603",
7621
8413
  "CVE-2024-50623",
7622
8414
  "CVE-2024-51378",
8415
+ "CVE-2024-5217",
8416
+ "CVE-2024-5274",
7623
8417
  "CVE-2024-53104",
7624
8418
  "CVE-2024-53150",
7625
8419
  "CVE-2024-53197",
@@ -7627,32 +8421,64 @@
7627
8421
  "CVE-2024-55550",
7628
8422
  "CVE-2024-55591",
7629
8423
  "CVE-2024-5565",
8424
+ "CVE-2024-56145",
7630
8425
  "CVE-2024-57968",
7631
8426
  "CVE-2024-58136",
7632
8427
  "CVE-2024-5910",
7633
8428
  "CVE-2024-6047",
7634
8429
  "CVE-2024-7262",
8430
+ "CVE-2024-7399",
8431
+ "CVE-2024-7694",
8432
+ "CVE-2024-7965",
7635
8433
  "CVE-2024-7971",
8434
+ "CVE-2024-8068",
8435
+ "CVE-2024-8069",
8436
+ "CVE-2024-8190",
7636
8437
  "CVE-2024-8957",
7637
8438
  "CVE-2024-8963",
7638
8439
  "CVE-2024-9379",
7639
8440
  "CVE-2024-9380",
7640
8441
  "CVE-2024-9474",
7641
8442
  "CVE-2024-9526",
8443
+ "CVE-2024-9537",
7642
8444
  "CVE-2024-9680",
7643
8445
  "CVE-2025-0108",
7644
8446
  "CVE-2025-0111",
8447
+ "CVE-2025-0133",
7645
8448
  "CVE-2025-0282",
7646
8449
  "CVE-2025-0411",
8450
+ "CVE-2025-10035",
7647
8451
  "CVE-2025-10164",
8452
+ "CVE-2025-10585",
8453
+ "CVE-2025-1094",
8454
+ "CVE-2025-11371",
8455
+ "CVE-2025-11837",
8456
+ "CVE-2025-11953",
8457
+ "CVE-2025-12686",
7648
8458
  "CVE-2025-1316",
8459
+ "CVE-2025-13223",
8460
+ "CVE-2025-14174",
8461
+ "CVE-2025-14611",
8462
+ "CVE-2025-14733",
8463
+ "CVE-2025-14847",
7649
8464
  "CVE-2025-1550",
8465
+ "CVE-2025-15556",
7650
8466
  "CVE-2025-1753",
7651
8467
  "CVE-2025-1976",
8468
+ "CVE-2025-20333",
8469
+ "CVE-2025-20352",
8470
+ "CVE-2025-20393",
8471
+ "CVE-2025-21042",
8472
+ "CVE-2025-21043",
7652
8473
  "CVE-2025-21333",
7653
8474
  "CVE-2025-21334",
7654
8475
  "CVE-2025-21335",
8476
+ "CVE-2025-21479",
8477
+ "CVE-2025-21480",
7655
8478
  "CVE-2025-21590",
8479
+ "CVE-2025-22224",
8480
+ "CVE-2025-22225",
8481
+ "CVE-2025-22226",
7656
8482
  "CVE-2025-22457",
7657
8483
  "CVE-2025-23006",
7658
8484
  "CVE-2025-23209",
@@ -7661,104 +8487,249 @@
7661
8487
  "CVE-2025-24054",
7662
8488
  "CVE-2025-24085",
7663
8489
  "CVE-2025-24200",
8490
+ "CVE-2025-24201",
7664
8491
  "CVE-2025-24472",
7665
8492
  "CVE-2025-24813",
8493
+ "CVE-2025-24893",
7666
8494
  "CVE-2025-24983",
7667
8495
  "CVE-2025-24984",
7668
8496
  "CVE-2025-24985",
7669
8497
  "CVE-2025-24989",
8498
+ "CVE-2025-24990",
7670
8499
  "CVE-2025-24991",
7671
8500
  "CVE-2025-24993",
7672
8501
  "CVE-2025-25181",
8502
+ "CVE-2025-25257",
7673
8503
  "CVE-2025-25297",
8504
+ "CVE-2025-26399",
7674
8505
  "CVE-2025-26633",
8506
+ "CVE-2025-27038",
7675
8507
  "CVE-2025-27363",
8508
+ "CVE-2025-2749",
7676
8509
  "CVE-2025-27520",
8510
+ "CVE-2025-2775",
8511
+ "CVE-2025-2776",
7677
8512
  "CVE-2025-2783",
8513
+ "CVE-2025-27920",
8514
+ "CVE-2025-29635",
7678
8515
  "CVE-2025-29824",
8516
+ "CVE-2025-30066",
8517
+ "CVE-2025-30154",
7679
8518
  "CVE-2025-30165",
7680
8519
  "CVE-2025-30202",
8520
+ "CVE-2025-30397",
7681
8521
  "CVE-2025-30400",
7682
8522
  "CVE-2025-30406",
8523
+ "CVE-2025-31125",
7683
8524
  "CVE-2025-31161",
7684
8525
  "CVE-2025-31200",
7685
8526
  "CVE-2025-31201",
8527
+ "CVE-2025-31277",
7686
8528
  "CVE-2025-31324",
8529
+ "CVE-2025-32432",
7687
8530
  "CVE-2025-32434",
7688
8531
  "CVE-2025-32444",
8532
+ "CVE-2025-32463",
7689
8533
  "CVE-2025-3248",
8534
+ "CVE-2025-32701",
8535
+ "CVE-2025-32706",
8536
+ "CVE-2025-32709",
8537
+ "CVE-2025-32756",
8538
+ "CVE-2025-33053",
8539
+ "CVE-2025-33073",
7690
8540
  "CVE-2025-33236",
7691
8541
  "CVE-2025-34028",
7692
8542
  "CVE-2025-34291",
7693
8543
  "CVE-2025-3466",
8544
+ "CVE-2025-35939",
8545
+ "CVE-2025-37164",
8546
+ "CVE-2025-38352",
7694
8547
  "CVE-2025-3928",
8548
+ "CVE-2025-4008",
8549
+ "CVE-2025-40551",
8550
+ "CVE-2025-41244",
7695
8551
  "CVE-2025-42599",
8552
+ "CVE-2025-42999",
8553
+ "CVE-2025-43200",
8554
+ "CVE-2025-43300",
8555
+ "CVE-2025-43510",
8556
+ "CVE-2025-43520",
8557
+ "CVE-2025-43529",
8558
+ "CVE-2025-4428",
8559
+ "CVE-2025-4632",
7696
8560
  "CVE-2025-47729",
8561
+ "CVE-2025-47812",
8562
+ "CVE-2025-47813",
8563
+ "CVE-2025-47827",
8564
+ "CVE-2025-48384",
8565
+ "CVE-2025-48543",
8566
+ "CVE-2025-48572",
7697
8567
  "CVE-2025-48595",
8568
+ "CVE-2025-48633",
8569
+ "CVE-2025-48703",
8570
+ "CVE-2025-48927",
8571
+ "CVE-2025-4919",
7698
8572
  "CVE-2025-49596",
8573
+ "CVE-2025-49704",
8574
+ "CVE-2025-49844",
8575
+ "CVE-2025-5086",
7699
8576
  "CVE-2025-51480",
8577
+ "CVE-2025-52691",
8578
+ "CVE-2025-53521",
8579
+ "CVE-2025-53690",
8580
+ "CVE-2025-53770",
8581
+ "CVE-2025-53773",
8582
+ "CVE-2025-54068",
7700
8583
  "CVE-2025-54136",
8584
+ "CVE-2025-5419",
8585
+ "CVE-2025-54253",
8586
+ "CVE-2025-54313",
8587
+ "CVE-2025-54948",
8588
+ "CVE-2025-55177",
8589
+ "CVE-2025-55182",
8590
+ "CVE-2025-55319",
7701
8591
  "CVE-2025-56520",
8592
+ "CVE-2025-58034",
8593
+ "CVE-2025-58360",
8594
+ "CVE-2025-59230",
8595
+ "CVE-2025-59287",
8596
+ "CVE-2025-59374",
8597
+ "CVE-2025-59529",
8598
+ "CVE-2025-59689",
7702
8599
  "CVE-2025-60455",
8600
+ "CVE-2025-60710",
8601
+ "CVE-2025-61884",
8602
+ "CVE-2025-61932",
8603
+ "CVE-2025-6204",
8604
+ "CVE-2025-6205",
8605
+ "CVE-2025-6218",
8606
+ "CVE-2025-62215",
8607
+ "CVE-2025-62221",
8608
+ "CVE-2025-62847",
8609
+ "CVE-2025-62848",
8610
+ "CVE-2025-62849",
8611
+ "CVE-2025-64328",
8612
+ "CVE-2025-64446",
7703
8613
  "CVE-2025-64496",
8614
+ "CVE-2025-6543",
8615
+ "CVE-2025-6554",
8616
+ "CVE-2025-6558",
8617
+ "CVE-2025-66376",
8618
+ "CVE-2025-66644",
7704
8619
  "CVE-2025-67038",
7705
8620
  "CVE-2025-67818",
8621
+ "CVE-2025-68461",
8622
+ "CVE-2025-68613",
8623
+ "CVE-2025-68645",
8624
+ "CVE-2025-68664",
8625
+ "CVE-2025-68665",
7706
8626
  "CVE-2025-68668",
8627
+ "CVE-2025-6965",
8628
+ "CVE-2025-7775",
8629
+ "CVE-2025-8088",
8630
+ "CVE-2025-8110",
7707
8631
  "CVE-2025-8747",
8632
+ "CVE-2025-8875",
8633
+ "CVE-2025-8876",
8634
+ "CVE-2025-9242",
8635
+ "CVE-2025-9377",
8636
+ "CVE-2026-0300",
7708
8637
  "CVE-2026-0766",
7709
8638
  "CVE-2026-0770",
7710
8639
  "CVE-2026-10520",
7711
8640
  "CVE-2026-11645",
7712
8641
  "CVE-2026-12569",
8642
+ "CVE-2026-1281",
8643
+ "CVE-2026-1340",
7713
8644
  "CVE-2026-15409",
7714
8645
  "CVE-2026-15410",
8646
+ "CVE-2026-20045",
8647
+ "CVE-2026-20122",
8648
+ "CVE-2026-20131",
8649
+ "CVE-2026-20133",
7715
8650
  "CVE-2026-20230",
7716
8651
  "CVE-2026-20253",
7717
8652
  "CVE-2026-20262",
8653
+ "CVE-2026-20700",
8654
+ "CVE-2026-20805",
8655
+ "CVE-2026-20963",
8656
+ "CVE-2026-21385",
8657
+ "CVE-2026-21509",
8658
+ "CVE-2026-21510",
8659
+ "CVE-2026-21513",
8660
+ "CVE-2026-21514",
8661
+ "CVE-2026-21519",
8662
+ "CVE-2026-21643",
7718
8663
  "CVE-2026-21858",
7719
8664
  "CVE-2026-21877",
7720
8665
  "CVE-2026-22218",
7721
8666
  "CVE-2026-22219",
7722
8667
  "CVE-2026-22252",
7723
8668
  "CVE-2026-22688",
8669
+ "CVE-2026-22719",
8670
+ "CVE-2026-22778",
8671
+ "CVE-2026-24061",
7724
8672
  "CVE-2026-24213",
7725
8673
  "CVE-2026-24214",
7726
8674
  "CVE-2026-24215",
8675
+ "CVE-2026-2441",
8676
+ "CVE-2026-24423",
7727
8677
  "CVE-2026-25089",
8678
+ "CVE-2026-25108",
7728
8679
  "CVE-2026-25592",
7729
8680
  "CVE-2026-26015",
7730
8681
  "CVE-2026-28318",
7731
8682
  "CVE-2026-3059",
7732
8683
  "CVE-2026-3060",
8684
+ "CVE-2026-30615",
7733
8685
  "CVE-2026-30616",
7734
8686
  "CVE-2026-30617",
8687
+ "CVE-2026-30623",
7735
8688
  "CVE-2026-30624",
7736
8689
  "CVE-2026-30625",
7737
8690
  "CVE-2026-31229",
7738
8691
  "CVE-2026-31230",
8692
+ "CVE-2026-31431",
8693
+ "CVE-2026-31635",
8694
+ "CVE-2026-32201",
7739
8695
  "CVE-2026-33017",
8696
+ "CVE-2026-33825",
7740
8697
  "CVE-2026-34159",
8698
+ "CVE-2026-34197",
8699
+ "CVE-2026-34621",
7741
8700
  "CVE-2026-34908",
7742
8701
  "CVE-2026-34909",
7743
8702
  "CVE-2026-34910",
7744
8703
  "CVE-2026-34926",
8704
+ "CVE-2026-3502",
7745
8705
  "CVE-2026-35273",
8706
+ "CVE-2026-35616",
8707
+ "CVE-2026-3909",
8708
+ "CVE-2026-3910",
7746
8709
  "CVE-2026-39808",
8710
+ "CVE-2026-39884",
7747
8711
  "CVE-2026-40933",
7748
8712
  "CVE-2026-41091",
7749
8713
  "CVE-2026-42271",
8714
+ "CVE-2026-42897",
8715
+ "CVE-2026-42945",
8716
+ "CVE-2026-43284",
8717
+ "CVE-2026-43500",
7750
8718
  "CVE-2026-45247",
8719
+ "CVE-2026-45321",
7751
8720
  "CVE-2026-45498",
7752
8721
  "CVE-2026-45659",
7753
8722
  "CVE-2026-45829",
7754
8723
  "CVE-2026-46300",
7755
8724
  "CVE-2026-46333",
8725
+ "CVE-2026-48027",
7756
8726
  "CVE-2026-48172",
7757
8727
  "CVE-2026-48282",
7758
8728
  "CVE-2026-48558",
7759
8729
  "CVE-2026-48907",
7760
8730
  "CVE-2026-48908",
7761
8731
  "CVE-2026-48939",
8732
+ "CVE-2026-5281",
7762
8733
  "CVE-2026-54420",
7763
8734
  "CVE-2026-56164",
7764
8735
  "CVE-2026-56291",
@@ -7766,11 +8737,20 @@
7766
8737
  "CVE-2026-58644",
7767
8738
  "CVE-2026-60137",
7768
8739
  "CVE-2026-63030",
8740
+ "CVE-2026-6973",
7769
8741
  "CVE-2026-7473",
8742
+ "CVE-2026-7482",
7770
8743
  "CVE-2026-8398",
7771
8744
  "CVE-2026-9082",
8745
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
8746
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
8747
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
8748
+ "MAL-2026-3083",
7772
8749
  "MAL-2026-MOIKA-DEPCONFUSION",
8750
+ "MAL-2026-NODE-IPC-STEALER",
8751
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
7773
8752
  "MAL-2026-SHAI-HULUD-OSS",
8753
+ "MAL-2026-TANSTACK-MINI",
7774
8754
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
7775
8755
  ],
7776
8756
  "atlas_refs": [],
@@ -7802,15 +8782,18 @@
7802
8782
  "status": "open",
7803
8783
  "opened_date": "2026-05-17",
7804
8784
  "evidence_cves": [
8785
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
7805
8786
  "CVE-2019-7256",
7806
8787
  "CVE-2020-29574",
7807
8788
  "CVE-2021-20123",
7808
8789
  "CVE-2021-33044",
7809
8790
  "CVE-2021-33045",
8791
+ "CVE-2021-38371",
7810
8792
  "CVE-2021-44207",
7811
8793
  "CVE-2022-0492",
7812
8794
  "CVE-2022-1471",
7813
8795
  "CVE-2022-36551",
8796
+ "CVE-2022-37055",
7814
8797
  "CVE-2023-20109",
7815
8798
  "CVE-2023-20198",
7816
8799
  "CVE-2023-20269",
@@ -7819,13 +8802,16 @@
7819
8802
  "CVE-2023-36033",
7820
8803
  "CVE-2023-36844",
7821
8804
  "CVE-2023-36851",
8805
+ "CVE-2023-38950",
7822
8806
  "CVE-2023-41179",
8807
+ "CVE-2023-43472",
7823
8808
  "CVE-2023-43654",
7824
8809
  "CVE-2023-43791",
7825
8810
  "CVE-2023-44467",
7826
8811
  "CVE-2023-46748",
7827
8812
  "CVE-2023-47117",
7828
8813
  "CVE-2023-48022",
8814
+ "CVE-2023-50224",
7829
8815
  "CVE-2023-51449",
7830
8816
  "CVE-2023-6016",
7831
8817
  "CVE-2023-6019",
@@ -7878,9 +8864,11 @@
7878
8864
  "CVE-2024-9526",
7879
8865
  "CVE-2025-0282",
7880
8866
  "CVE-2025-10164",
8867
+ "CVE-2025-10725",
7881
8868
  "CVE-2025-1550",
7882
8869
  "CVE-2025-1753",
7883
8870
  "CVE-2025-1796",
8871
+ "CVE-2025-21085",
7884
8872
  "CVE-2025-21391",
7885
8873
  "CVE-2025-22457",
7886
8874
  "CVE-2025-23254",
@@ -7904,6 +8892,7 @@
7904
8892
  "CVE-2025-48595",
7905
8893
  "CVE-2025-49596",
7906
8894
  "CVE-2025-51480",
8895
+ "CVE-2025-53767",
7907
8896
  "CVE-2025-54136",
7908
8897
  "CVE-2025-56520",
7909
8898
  "CVE-2025-60455",
@@ -7912,6 +8901,7 @@
7912
8901
  "CVE-2025-67818",
7913
8902
  "CVE-2025-68668",
7914
8903
  "CVE-2025-69286",
8904
+ "CVE-2025-8671",
7915
8905
  "CVE-2025-8747",
7916
8906
  "CVE-2026-0257",
7917
8907
  "CVE-2026-0766",
@@ -7962,7 +8952,8 @@
7962
8952
  "CVE-2026-5760",
7963
8953
  "CVE-2026-7473",
7964
8954
  "CVE-2026-8398",
7965
- "CVE-2026-9082"
8955
+ "CVE-2026-9082",
8956
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG"
7966
8957
  ],
7967
8958
  "atlas_refs": [],
7968
8959
  "attack_refs": [
@@ -8030,17 +9021,32 @@
8030
9021
  "status": "open",
8031
9022
  "opened_date": "2026-05-17",
8032
9023
  "evidence_cves": [
9024
+ "CVE-2020-10148",
9025
+ "CVE-2022-23748",
8033
9026
  "CVE-2022-23812",
8034
9027
  "CVE-2024-11120",
9028
+ "CVE-2024-21626",
8035
9029
  "CVE-2024-24590",
8036
9030
  "CVE-2024-24591",
9031
+ "CVE-2024-3094",
8037
9032
  "CVE-2024-3154",
8038
9033
  "CVE-2024-37052",
8039
9034
  "CVE-2024-37060",
8040
9035
  "CVE-2024-6047",
9036
+ "CVE-2025-11837",
9037
+ "CVE-2025-15556",
9038
+ "CVE-2025-30066",
9039
+ "CVE-2025-30154",
9040
+ "CVE-2025-3935",
9041
+ "CVE-2025-54313",
9042
+ "CVE-2025-59287",
9043
+ "CVE-2026-30615",
9044
+ "CVE-2026-30623",
8041
9045
  "CVE-2026-31229",
8042
9046
  "CVE-2026-31230",
9047
+ "CVE-2026-48027",
8043
9048
  "CVE-2026-8398",
9049
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
8044
9050
  "MAL-2026-MOIKA-DEPCONFUSION",
8045
9051
  "MAL-2026-NODE-IPC-STEALER",
8046
9052
  "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
@@ -8179,6 +9185,7 @@
8179
9185
  "opened_date": "2026-05-18",
8180
9186
  "evidence_cves": [
8181
9187
  "CVE-2020-10148",
9188
+ "CVE-2021-44207",
8182
9189
  "CVE-2023-20198",
8183
9190
  "CVE-2023-20269",
8184
9191
  "CVE-2023-43791",
@@ -8187,16 +9194,25 @@
8187
9194
  "CVE-2023-6038",
8188
9195
  "CVE-2023-6448",
8189
9196
  "CVE-2024-12776",
9197
+ "CVE-2024-1709",
9198
+ "CVE-2024-20767",
8190
9199
  "CVE-2024-21182",
9200
+ "CVE-2024-29824",
9201
+ "CVE-2024-40766",
9202
+ "CVE-2025-10725",
8191
9203
  "CVE-2025-1796",
8192
9204
  "CVE-2025-3248",
8193
9205
  "CVE-2025-55241",
9206
+ "CVE-2026-20182",
8194
9207
  "CVE-2026-24206",
8195
9208
  "CVE-2026-24207",
8196
9209
  "CVE-2026-33017",
8197
9210
  "CVE-2026-35273",
9211
+ "CVE-2026-39987",
8198
9212
  "CVE-2026-41947",
8199
- "CVE-2026-41950"
9213
+ "CVE-2026-41950",
9214
+ "CVE-2026-55255",
9215
+ "CVE-2026-56164"
8200
9216
  ],
8201
9217
  "atlas_refs": [],
8202
9218
  "attack_refs": [
@@ -8228,6 +9244,9 @@
8228
9244
  "status": "open",
8229
9245
  "opened_date": "2026-05-18",
8230
9246
  "evidence_cves": [
9247
+ "CVE-2024-20481",
9248
+ "CVE-2024-3393",
9249
+ "CVE-2024-40711",
8231
9250
  "CVE-2025-59389"
8232
9251
  ],
8233
9252
  "atlas_refs": [],
@@ -8421,28 +9440,53 @@
8421
9440
  "status": "open",
8422
9441
  "opened_date": "2026-05-18",
8423
9442
  "evidence_cves": [
9443
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
8424
9444
  "CVE-2008-4128",
9445
+ "CVE-2008-4250",
9446
+ "CVE-2010-0806",
9447
+ "CVE-2011-0411",
8425
9448
  "CVE-2014-2120",
9449
+ "CVE-2014-3931",
8426
9450
  "CVE-2014-8361",
9451
+ "CVE-2015-7755",
8427
9452
  "CVE-2016-20017",
8428
9453
  "CVE-2016-3714",
9454
+ "CVE-2016-7836",
9455
+ "CVE-2017-1000353",
8429
9456
  "CVE-2017-3506",
8430
9457
  "CVE-2017-6884",
9458
+ "CVE-2017-7921",
9459
+ "CVE-2018-4063",
9460
+ "CVE-2019-19006",
8431
9461
  "CVE-2019-7256",
8432
9462
  "CVE-2020-13965",
8433
9463
  "CVE-2020-17519",
9464
+ "CVE-2020-24363",
9465
+ "CVE-2020-25078",
9466
+ "CVE-2020-25079",
8434
9467
  "CVE-2020-2883",
8435
9468
  "CVE-2021-20035",
8436
9469
  "CVE-2021-20123",
8437
9470
  "CVE-2021-20124",
9471
+ "CVE-2021-21311",
9472
+ "CVE-2021-22054",
9473
+ "CVE-2021-22175",
9474
+ "CVE-2021-22681",
9475
+ "CVE-2021-26828",
9476
+ "CVE-2021-26829",
8438
9477
  "CVE-2021-27137",
8439
9478
  "CVE-2021-33044",
8440
9479
  "CVE-2021-33045",
9480
+ "CVE-2021-33515",
8441
9481
  "CVE-2021-36380",
9482
+ "CVE-2021-38371",
9483
+ "CVE-2021-39935",
8442
9484
  "CVE-2021-40407",
8443
9485
  "CVE-2021-40655",
9486
+ "CVE-2022-20775",
8444
9487
  "CVE-2022-22948",
8445
9488
  "CVE-2022-36551",
9489
+ "CVE-2022-37055",
8446
9490
  "CVE-2023-20109",
8447
9491
  "CVE-2023-20198",
8448
9492
  "CVE-2023-20269",
@@ -8451,6 +9495,7 @@
8451
9495
  "CVE-2023-28434",
8452
9496
  "CVE-2023-29552",
8453
9497
  "CVE-2023-33246",
9498
+ "CVE-2023-33538",
8454
9499
  "CVE-2023-34048",
8455
9500
  "CVE-2023-35082",
8456
9501
  "CVE-2023-36761",
@@ -8459,7 +9504,10 @@
8459
9504
  "CVE-2023-36846",
8460
9505
  "CVE-2023-36847",
8461
9506
  "CVE-2023-36851",
9507
+ "CVE-2023-38950",
9508
+ "CVE-2023-39780",
8462
9509
  "CVE-2023-4346",
9510
+ "CVE-2023-43472",
8463
9511
  "CVE-2023-44221",
8464
9512
  "CVE-2023-44487",
8465
9513
  "CVE-2023-45249",
@@ -8467,11 +9515,13 @@
8467
9515
  "CVE-2023-47565",
8468
9516
  "CVE-2023-48788",
8469
9517
  "CVE-2023-49897",
9518
+ "CVE-2023-50224",
8470
9519
  "CVE-2023-50387",
8471
9520
  "CVE-2023-50868",
8472
9521
  "CVE-2023-51764",
8473
9522
  "CVE-2023-51765",
8474
9523
  "CVE-2023-51766",
9524
+ "CVE-2023-52163",
8475
9525
  "CVE-2023-6448",
8476
9526
  "CVE-2023-6548",
8477
9527
  "CVE-2023-6549",
@@ -8479,6 +9529,7 @@
8479
9529
  "CVE-2024-11667",
8480
9530
  "CVE-2024-1212",
8481
9531
  "CVE-2024-12450",
9532
+ "CVE-2024-12987",
8482
9533
  "CVE-2024-20353",
8483
9534
  "CVE-2024-20399",
8484
9535
  "CVE-2024-20481",
@@ -8493,30 +9544,77 @@
8493
9544
  "CVE-2024-31462",
8494
9545
  "CVE-2024-3273",
8495
9546
  "CVE-2024-3393",
9547
+ "CVE-2024-37079",
8496
9548
  "CVE-2024-38812",
9549
+ "CVE-2024-39717",
8497
9550
  "CVE-2024-39891",
8498
9551
  "CVE-2024-4040",
9552
+ "CVE-2024-40635",
9553
+ "CVE-2024-4358",
8499
9554
  "CVE-2024-50603",
9555
+ "CVE-2024-54085",
9556
+ "CVE-2024-8069",
8500
9557
  "CVE-2024-9474",
8501
9558
  "CVE-2025-0108",
8502
9559
  "CVE-2025-0282",
8503
9560
  "CVE-2025-10164",
9561
+ "CVE-2025-11371",
9562
+ "CVE-2025-11953",
8504
9563
  "CVE-2025-1316",
9564
+ "CVE-2025-14733",
8505
9565
  "CVE-2025-1976",
9566
+ "CVE-2025-20281",
9567
+ "CVE-2025-20333",
9568
+ "CVE-2025-20352",
9569
+ "CVE-2025-20362",
9570
+ "CVE-2025-20393",
8506
9571
  "CVE-2025-21590",
8507
9572
  "CVE-2025-22457",
8508
9573
  "CVE-2025-24472",
8509
9574
  "CVE-2025-25297",
9575
+ "CVE-2025-2746",
9576
+ "CVE-2025-27920",
9577
+ "CVE-2025-29635",
9578
+ "CVE-2025-31125",
8510
9579
  "CVE-2025-31161",
8511
9580
  "CVE-2025-31324",
9581
+ "CVE-2025-32756",
9582
+ "CVE-2025-33073",
9583
+ "CVE-2025-34026",
9584
+ "CVE-2025-37164",
9585
+ "CVE-2025-4008",
9586
+ "CVE-2025-40602",
9587
+ "CVE-2025-42999",
9588
+ "CVE-2025-4428",
9589
+ "CVE-2025-47812",
9590
+ "CVE-2025-48927",
9591
+ "CVE-2025-49844",
9592
+ "CVE-2025-5086",
8512
9593
  "CVE-2025-51480",
9594
+ "CVE-2025-54309",
9595
+ "CVE-2025-54948",
8513
9596
  "CVE-2025-56520",
9597
+ "CVE-2025-57819",
9598
+ "CVE-2025-58034",
9599
+ "CVE-2025-58360",
9600
+ "CVE-2025-59718",
9601
+ "CVE-2025-61757",
9602
+ "CVE-2025-61932",
9603
+ "CVE-2025-62848",
9604
+ "CVE-2025-64446",
8514
9605
  "CVE-2025-67038",
9606
+ "CVE-2025-68645",
8515
9607
  "CVE-2025-68668",
9608
+ "CVE-2025-9242",
8516
9609
  "CVE-2026-0257",
8517
9610
  "CVE-2026-0770",
8518
9611
  "CVE-2026-15409",
8519
9612
  "CVE-2026-15410",
9613
+ "CVE-2026-1603",
9614
+ "CVE-2026-20122",
9615
+ "CVE-2026-20127",
9616
+ "CVE-2026-20128",
9617
+ "CVE-2026-20133",
8520
9618
  "CVE-2026-20182",
8521
9619
  "CVE-2026-20230",
8522
9620
  "CVE-2026-20262",
@@ -8524,11 +9622,17 @@
8524
9622
  "CVE-2026-21877",
8525
9623
  "CVE-2026-22218",
8526
9624
  "CVE-2026-22219",
9625
+ "CVE-2026-24061",
9626
+ "CVE-2026-24858",
9627
+ "CVE-2026-25108",
8527
9628
  "CVE-2026-3059",
8528
9629
  "CVE-2026-3060",
8529
9630
  "CVE-2026-34908",
8530
9631
  "CVE-2026-34909",
8531
9632
  "CVE-2026-34910",
9633
+ "CVE-2026-3502",
9634
+ "CVE-2026-35616",
9635
+ "CVE-2026-43284",
8532
9636
  "CVE-2026-50751",
8533
9637
  "CVE-2026-56290",
8534
9638
  "CVE-2026-5760",
@@ -8912,13 +10016,17 @@
8912
10016
  "CVE-2018-9276",
8913
10017
  "CVE-2019-11001",
8914
10018
  "CVE-2019-7256",
10019
+ "CVE-2020-15415",
8915
10020
  "CVE-2021-40407",
8916
10021
  "CVE-2021-41277",
8917
10022
  "CVE-2022-22948",
8918
10023
  "CVE-2023-20273",
10024
+ "CVE-2023-25280",
8919
10025
  "CVE-2023-27524",
8920
10026
  "CVE-2023-29552",
10027
+ "CVE-2023-45727",
8921
10028
  "CVE-2023-49103",
10029
+ "CVE-2024-0012",
8922
10030
  "CVE-2024-11120",
8923
10031
  "CVE-2024-29059",
8924
10032
  "CVE-2024-3272",
@@ -8929,14 +10037,18 @@
8929
10037
  "CVE-2024-43093",
8930
10038
  "CVE-2024-45195",
8931
10039
  "CVE-2024-4577",
10040
+ "CVE-2024-55956",
8932
10041
  "CVE-2024-5910",
8933
10042
  "CVE-2024-6047",
10043
+ "CVE-2024-8956",
8934
10044
  "CVE-2024-8957",
10045
+ "CVE-2024-9379",
8935
10046
  "CVE-2025-0108",
8936
10047
  "CVE-2025-49844",
8937
10048
  "CVE-2025-59529",
8938
10049
  "CVE-2025-8671",
8939
- "CVE-2026-48939"
10050
+ "CVE-2026-48939",
10051
+ "CVE-2026-7482"
8940
10052
  ],
8941
10053
  "theater_test": {
8942
10054
  "claim": "We are compliant with A.8.9 (Configuration management) because we follow the documented requirement: Annex A.8.9 — establishing, documenting, implementing, monitoring, and reviewing configurations of hardware, software, services, and networks. Anchored on a documented baseline and continuous monitori",
@@ -8992,8 +10104,10 @@
8992
10104
  "status": "open",
8993
10105
  "opened_at": "2026-05-18",
8994
10106
  "evidence_cves": [
10107
+ "CVE-2024-43451",
8995
10108
  "CVE-2025-14847",
8996
10109
  "CVE-2025-22226",
10110
+ "CVE-2025-23209",
8997
10111
  "CVE-2025-47729",
8998
10112
  "CVE-2025-69286"
8999
10113
  ],
@@ -9146,7 +10260,9 @@
9146
10260
  "status": "open",
9147
10261
  "opened_at": "2026-05-18",
9148
10262
  "evidence_cves": [
10263
+ "CVE-2025-6543",
9149
10264
  "CVE-2025-8671",
10265
+ "CVE-2026-21525",
9150
10266
  "CVE-2026-31635"
9151
10267
  ],
9152
10268
  "theater_test": {
@@ -9618,9 +10734,15 @@
9618
10734
  "opened_at": "2026-05-18",
9619
10735
  "evidence_cves": [
9620
10736
  "CVE-2022-23812",
10737
+ "CVE-2024-40890",
10738
+ "CVE-2024-50623",
10739
+ "CVE-2026-45321",
10740
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
9621
10741
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
10742
+ "MAL-2026-3083",
9622
10743
  "MAL-2026-MOIKA-DEPCONFUSION",
9623
10744
  "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
10745
+ "MAL-2026-SHAI-HULUD-OSS",
9624
10746
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
9625
10747
  ],
9626
10748
  "theater_test": {