@blamejs/exceptd-skills 0.18.25 → 0.18.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (18) hide show
  1. package/CHANGELOG.md +8 -0
  2. package/README.md +1 -1
  3. package/data/_indexes/_meta.json +10 -10
  4. package/data/_indexes/activity-feed.json +11 -11
  5. package/data/_indexes/catalog-summaries.json +10 -10
  6. package/data/_indexes/chains.json +172575 -41354
  7. package/data/_indexes/frequency.json +2 -0
  8. package/data/attack-techniques.json +209 -5
  9. package/data/cve-catalog.json +12816 -545
  10. package/data/cwe-catalog.json +174 -3
  11. package/data/framework-control-gaps.json +1634 -12
  12. package/data/zeroday-lessons.json +6101 -1
  13. package/lib/validate-package.js +5 -2
  14. package/manifest.json +53 -53
  15. package/package.json +2 -2
  16. package/sbom.cdx.json +44 -29
  17. package/scripts/check-framework-gap-coverage.js +103 -0
  18. package/scripts/predeploy.js +11 -0
package/data/framework-control-gaps.json CHANGED
@@ -240,23 +240,59 @@
240
240
  "status": "open",
241
241
  "opened_date": "2026-05-13",
242
242
  "evidence_cves": [
243
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
244
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
245
+ "CVE-2007-0671",
246
+ "CVE-2008-0015",
243
247
  "CVE-2008-4128",
248
+ "CVE-2009-0238",
249
+ "CVE-2009-0556",
250
+ "CVE-2009-1537",
251
+ "CVE-2009-3459",
252
+ "CVE-2010-0249",
253
+ "CVE-2010-0806",
254
+ "CVE-2010-3765",
255
+ "CVE-2010-3904",
256
+ "CVE-2011-3402",
257
+ "CVE-2012-1854",
244
258
  "CVE-2012-4792",
259
+ "CVE-2013-0643",
245
260
  "CVE-2013-0648",
261
+ "CVE-2013-3163",
262
+ "CVE-2013-3893",
263
+ "CVE-2013-3918",
246
264
  "CVE-2014-0497",
247
265
  "CVE-2014-0502",
248
266
  "CVE-2016-3714",
267
+ "CVE-2016-8735",
268
+ "CVE-2016-9079",
249
269
  "CVE-2017-3506",
250
270
  "CVE-2018-9276",
251
271
  "CVE-2019-16278",
272
+ "CVE-2020-12641",
273
+ "CVE-2020-13965",
274
+ "CVE-2020-17519",
275
+ "CVE-2020-7796",
276
+ "CVE-2021-21311",
277
+ "CVE-2021-26828",
278
+ "CVE-2021-26829",
252
279
  "CVE-2021-3129",
280
+ "CVE-2021-39144",
253
281
  "CVE-2022-23748",
282
+ "CVE-2022-27926",
254
283
  "CVE-2023-20273",
255
284
  "CVE-2023-21237",
285
+ "CVE-2023-2136",
286
+ "CVE-2023-21492",
287
+ "CVE-2023-24880",
256
288
  "CVE-2023-26369",
289
+ "CVE-2023-27350",
257
290
  "CVE-2023-27524",
291
+ "CVE-2023-28204",
258
292
  "CVE-2023-29360",
259
293
  "CVE-2023-29552",
294
+ "CVE-2023-32049",
295
+ "CVE-2023-32409",
260
296
  "CVE-2023-36025",
261
297
  "CVE-2023-36563",
262
298
  "CVE-2023-36584",
@@ -264,10 +300,14 @@
264
300
  "CVE-2023-36845",
265
301
  "CVE-2023-36846",
266
302
  "CVE-2023-36847",
303
+ "CVE-2023-36884",
267
304
  "CVE-2023-38831",
268
305
  "CVE-2023-41993",
269
306
  "CVE-2023-42793",
270
307
  "CVE-2023-46604",
308
+ "CVE-2023-51764",
309
+ "CVE-2023-51765",
310
+ "CVE-2023-51766",
271
311
  "CVE-2023-5217",
272
312
  "CVE-2023-6345",
273
313
  "CVE-2023-6548",
@@ -280,6 +320,8 @@
280
320
  "CVE-2024-29059",
281
321
  "CVE-2024-29988",
282
322
  "CVE-2024-30040",
323
+ "CVE-2024-3154",
324
+ "CVE-2024-37383",
283
325
  "CVE-2024-38112",
284
326
  "CVE-2024-38178",
285
327
  "CVE-2024-38189",
@@ -287,6 +329,7 @@
287
329
  "CVE-2024-38217",
288
330
  "CVE-2024-38226",
289
331
  "CVE-2024-41710",
332
+ "CVE-2024-42009",
290
333
  "CVE-2024-43461",
291
334
  "CVE-2024-43572",
292
335
  "CVE-2024-43573",
@@ -294,13 +337,62 @@
294
337
  "CVE-2024-49039",
295
338
  "CVE-2024-4947",
296
339
  "CVE-2024-55956",
340
+ "CVE-2024-56145",
297
341
  "CVE-2024-7262",
342
+ "CVE-2024-7971",
298
343
  "CVE-2024-8957",
299
344
  "CVE-2024-9463",
300
345
  "CVE-2024-9680",
301
346
  "CVE-2025-0411",
347
+ "CVE-2025-11953",
348
+ "CVE-2025-13223",
349
+ "CVE-2025-27915",
350
+ "CVE-2025-30066",
351
+ "CVE-2025-30154",
352
+ "CVE-2025-30397",
353
+ "CVE-2025-31125",
354
+ "CVE-2025-33053",
355
+ "CVE-2025-48700",
356
+ "CVE-2025-48927",
357
+ "CVE-2025-4919",
358
+ "CVE-2025-49844",
359
+ "CVE-2025-53690",
360
+ "CVE-2025-53773",
361
+ "CVE-2025-54313",
362
+ "CVE-2025-55319",
363
+ "CVE-2025-59374",
364
+ "CVE-2025-6558",
365
+ "CVE-2025-66376",
366
+ "CVE-2025-68461",
367
+ "CVE-2025-68664",
368
+ "CVE-2025-68665",
369
+ "CVE-2025-8088",
302
370
  "CVE-2026-0770",
303
- "CVE-2026-48939"
371
+ "CVE-2026-21509",
372
+ "CVE-2026-21513",
373
+ "CVE-2026-21514",
374
+ "CVE-2026-22778",
375
+ "CVE-2026-24061",
376
+ "CVE-2026-30615",
377
+ "CVE-2026-30623",
378
+ "CVE-2026-32201",
379
+ "CVE-2026-32202",
380
+ "CVE-2026-34621",
381
+ "CVE-2026-3910",
382
+ "CVE-2026-39884",
383
+ "CVE-2026-39987",
384
+ "CVE-2026-42897",
385
+ "CVE-2026-48027",
386
+ "CVE-2026-48939",
387
+ "CVE-2026-5281",
388
+ "CVE-2026-7482",
389
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
390
+ "MAL-2026-3083",
391
+ "MAL-2026-MOIKA-DEPCONFUSION",
392
+ "MAL-2026-NODE-IPC-STEALER",
393
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
394
+ "MAL-2026-TANSTACK-MINI",
395
+ "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
304
396
  ],
305
397
  "atlas_refs": [
306
398
  "AML.T0010",
@@ -335,7 +427,12 @@
335
427
  "real_requirement": "Backups cover AI-system artefacts (model weights, RAG corpora, plugin registries, AI-tool configuration files) with off-network retention; backup-integrity verification includes per-document hash comparison for RAG corpora to detect corpus poisoning; documented 'AI-system restore to last-known-good' workflow that maps to detected AI-incident classes.",
336
428
  "status": "open",
337
429
  "opened_date": "2026-05-13",
338
- "evidence_cves": [],
430
+ "evidence_cves": [
431
+ "CVE-2021-27878",
432
+ "CVE-2022-23812",
433
+ "CVE-2024-1708",
434
+ "CVE-2024-37085"
435
+ ],
339
436
  "atlas_refs": [
340
437
  "AML.T0010",
341
438
  "AML.T0020",
@@ -368,7 +465,15 @@
368
465
  "real_requirement": "MFA covers human identities at ML2+ with phishing-resistant factors (WebAuthn/passkeys, FIDO2). AI-provider credentials use short-lived OIDC tokens with mandatory rotation, never long-lived bearer keys. MCP server authentication uses signed JWTs / mTLS in production. Deepfake-grade phishing assumed; MFA decisions treat SMS/voice as insufficient.",
369
466
  "status": "open",
370
467
  "opened_date": "2026-05-13",
371
- "evidence_cves": [],
468
+ "evidence_cves": [
469
+ "CVE-2024-39891",
470
+ "CVE-2025-32975",
471
+ "CVE-2025-48928",
472
+ "CVE-2025-55241",
473
+ "CVE-2025-5777",
474
+ "CVE-2026-16232",
475
+ "CVE-2026-20182"
476
+ ],
372
477
  "atlas_refs": [
373
478
  "AML.T0055"
374
479
  ],
@@ -403,78 +508,207 @@
403
508
  "status": "open",
404
509
  "opened_date": "2026-05-13",
405
510
  "evidence_cves": [
511
+ "CVE-2004-1464",
512
+ "CVE-2008-4250",
513
+ "CVE-2010-3962",
514
+ "CVE-2011-0411",
515
+ "CVE-2014-0196",
406
516
  "CVE-2014-100005",
407
517
  "CVE-2014-2120",
518
+ "CVE-2014-3931",
519
+ "CVE-2014-6278",
408
520
  "CVE-2014-8361",
521
+ "CVE-2015-5317",
522
+ "CVE-2015-7755",
523
+ "CVE-2016-0165",
524
+ "CVE-2016-10033",
409
525
  "CVE-2016-20017",
526
+ "CVE-2016-3427",
527
+ "CVE-2016-6415",
528
+ "CVE-2016-7836",
410
529
  "CVE-2017-1000253",
530
+ "CVE-2017-1000353",
411
531
  "CVE-2017-12637",
532
+ "CVE-2017-18368",
412
533
  "CVE-2017-3066",
534
+ "CVE-2017-6742",
413
535
  "CVE-2017-6884",
536
+ "CVE-2017-7494",
537
+ "CVE-2017-7921",
414
538
  "CVE-2018-0824",
539
+ "CVE-2018-14634",
415
540
  "CVE-2018-14667",
416
541
  "CVE-2018-14933",
417
542
  "CVE-2018-15133",
418
543
  "CVE-2018-19410",
544
+ "CVE-2018-4063",
419
545
  "CVE-2018-8639",
546
+ "CVE-2019-0344",
420
547
  "CVE-2019-11001",
548
+ "CVE-2019-1388",
549
+ "CVE-2019-17621",
550
+ "CVE-2019-19006",
551
+ "CVE-2019-20500",
552
+ "CVE-2019-5418",
553
+ "CVE-2019-6693",
554
+ "CVE-2019-8526",
555
+ "CVE-2019-9621",
421
556
  "CVE-2019-9874",
422
557
  "CVE-2019-9875",
423
558
  "CVE-2020-0618",
559
+ "CVE-2020-10148",
424
560
  "CVE-2020-11023",
425
561
  "CVE-2020-14644",
426
562
  "CVE-2020-15069",
427
563
  "CVE-2020-15415",
564
+ "CVE-2020-17103-REREGRESSION-2026",
565
+ "CVE-2020-24363",
566
+ "CVE-2020-25078",
567
+ "CVE-2020-25079",
428
568
  "CVE-2020-2551",
429
569
  "CVE-2020-2883",
430
570
  "CVE-2020-3259",
571
+ "CVE-2020-35730",
572
+ "CVE-2020-9715",
431
573
  "CVE-2021-20035",
432
574
  "CVE-2021-20124",
575
+ "CVE-2021-22054",
576
+ "CVE-2021-22175",
577
+ "CVE-2021-22555",
578
+ "CVE-2021-22681",
579
+ "CVE-2021-25371",
580
+ "CVE-2021-25372",
581
+ "CVE-2021-25394",
582
+ "CVE-2021-25395",
583
+ "CVE-2021-25487",
584
+ "CVE-2021-25489",
433
585
  "CVE-2021-26086",
434
586
  "CVE-2021-27137",
587
+ "CVE-2021-27876",
588
+ "CVE-2021-27877",
589
+ "CVE-2021-29256",
590
+ "CVE-2021-30900",
591
+ "CVE-2021-30952",
592
+ "CVE-2021-31196",
593
+ "CVE-2021-32030",
594
+ "CVE-2021-33515",
595
+ "CVE-2021-3560",
435
596
  "CVE-2021-36380",
597
+ "CVE-2021-39935",
436
598
  "CVE-2021-40407",
437
599
  "CVE-2021-40655",
438
600
  "CVE-2021-41277",
601
+ "CVE-2021-43226",
602
+ "CVE-2021-43798",
603
+ "CVE-2021-44026",
604
+ "CVE-2021-44529",
605
+ "CVE-2021-45046",
439
606
  "CVE-2022-0185",
607
+ "CVE-2022-20775",
440
608
  "CVE-2022-21445",
441
609
  "CVE-2022-22071",
442
610
  "CVE-2022-22265",
611
+ "CVE-2022-22706",
443
612
  "CVE-2022-22948",
444
613
  "CVE-2022-23227",
445
614
  "CVE-2022-24816",
446
615
  "CVE-2022-2586",
616
+ "CVE-2022-29303",
617
+ "CVE-2022-3038",
618
+ "CVE-2022-31199",
619
+ "CVE-2022-38028",
620
+ "CVE-2022-38181",
621
+ "CVE-2022-39197",
622
+ "CVE-2022-40799",
623
+ "CVE-2022-41328",
624
+ "CVE-2022-42948",
447
625
  "CVE-2022-43769",
448
626
  "CVE-2022-43939",
627
+ "CVE-2022-48503",
449
628
  "CVE-2022-48618",
629
+ "CVE-2023-0266",
630
+ "CVE-2023-0386",
631
+ "CVE-2023-1389",
450
632
  "CVE-2023-1671",
451
633
  "CVE-2023-20118",
634
+ "CVE-2023-2033",
635
+ "CVE-2023-20867",
636
+ "CVE-2023-20887",
637
+ "CVE-2023-20963",
638
+ "CVE-2023-21529",
452
639
  "CVE-2023-21608",
640
+ "CVE-2023-21839",
453
641
  "CVE-2023-22515",
454
642
  "CVE-2023-22518",
455
643
  "CVE-2023-22527",
644
+ "CVE-2023-23397",
456
645
  "CVE-2023-23752",
646
+ "CVE-2023-24489",
647
+ "CVE-2023-24955",
457
648
  "CVE-2023-25280",
649
+ "CVE-2023-2533",
650
+ "CVE-2023-25717",
651
+ "CVE-2023-26083",
652
+ "CVE-2023-26359",
653
+ "CVE-2023-26360",
654
+ "CVE-2023-27351",
655
+ "CVE-2023-27532",
656
+ "CVE-2023-27992",
657
+ "CVE-2023-27997",
658
+ "CVE-2023-28205",
659
+ "CVE-2023-28206",
458
660
  "CVE-2023-28229",
661
+ "CVE-2023-28252",
662
+ "CVE-2023-28432",
459
663
  "CVE-2023-28434",
460
664
  "CVE-2023-28461",
665
+ "CVE-2023-2868",
666
+ "CVE-2023-28771",
667
+ "CVE-2023-29298",
461
668
  "CVE-2023-29300",
669
+ "CVE-2023-29336",
462
670
  "CVE-2023-29357",
671
+ "CVE-2023-29492",
672
+ "CVE-2023-3079",
673
+ "CVE-2023-32046",
674
+ "CVE-2023-32315",
675
+ "CVE-2023-32373",
676
+ "CVE-2023-32434",
677
+ "CVE-2023-32435",
678
+ "CVE-2023-32439",
679
+ "CVE-2023-33009",
680
+ "CVE-2023-33010",
463
681
  "CVE-2023-33063",
464
682
  "CVE-2023-33106",
683
+ "CVE-2023-33538",
465
684
  "CVE-2023-34048",
466
685
  "CVE-2023-34192",
686
+ "CVE-2023-34362",
687
+ "CVE-2023-35078",
688
+ "CVE-2023-35081",
467
689
  "CVE-2023-35082",
690
+ "CVE-2023-3519",
691
+ "CVE-2023-35311",
468
692
  "CVE-2023-35674",
469
693
  "CVE-2023-36036",
694
+ "CVE-2023-36424",
470
695
  "CVE-2023-36802",
696
+ "CVE-2023-36874",
697
+ "CVE-2023-37450",
698
+ "CVE-2023-37580",
699
+ "CVE-2023-38035",
700
+ "CVE-2023-38180",
471
701
  "CVE-2023-38203",
702
+ "CVE-2023-38205",
703
+ "CVE-2023-38606",
704
+ "CVE-2023-39780",
472
705
  "CVE-2023-40044",
473
706
  "CVE-2023-41061",
474
707
  "CVE-2023-41064",
475
708
  "CVE-2023-41265",
476
709
  "CVE-2023-41266",
477
710
  "CVE-2023-41763",
711
+ "CVE-2023-41974",
478
712
  "CVE-2023-41990",
479
713
  "CVE-2023-41991",
480
714
  "CVE-2023-41992",
@@ -482,8 +716,12 @@
482
716
  "CVE-2023-42824",
483
717
  "CVE-2023-42916",
484
718
  "CVE-2023-42917",
719
+ "CVE-2023-43000",
720
+ "CVE-2023-43208",
721
+ "CVE-2023-4346",
485
722
  "CVE-2023-43770",
486
723
  "CVE-2023-44221",
724
+ "CVE-2023-44487",
487
725
  "CVE-2023-45249",
488
726
  "CVE-2023-45727",
489
727
  "CVE-2023-46747",
@@ -493,53 +731,74 @@
493
731
  "CVE-2023-4762",
494
732
  "CVE-2023-48365",
495
733
  "CVE-2023-4863",
734
+ "CVE-2023-48788",
496
735
  "CVE-2023-49103",
497
736
  "CVE-2023-4911",
498
737
  "CVE-2023-4966",
499
738
  "CVE-2023-49897",
739
+ "CVE-2023-50387",
740
+ "CVE-2023-50868",
741
+ "CVE-2023-52163",
500
742
  "CVE-2023-5631",
501
743
  "CVE-2023-6549",
502
744
  "CVE-2023-7024",
503
745
  "CVE-2023-7028",
746
+ "CVE-2024-0012",
504
747
  "CVE-2024-0519",
748
+ "CVE-2024-0769",
505
749
  "CVE-2024-1086",
750
+ "CVE-2024-11182",
506
751
  "CVE-2024-11667",
507
752
  "CVE-2024-11680",
508
753
  "CVE-2024-1212",
509
754
  "CVE-2024-12356",
510
755
  "CVE-2024-12686",
756
+ "CVE-2024-12987",
511
757
  "CVE-2024-13159",
512
758
  "CVE-2024-13160",
513
759
  "CVE-2024-13161",
760
+ "CVE-2024-1709",
761
+ "CVE-2024-20399",
514
762
  "CVE-2024-20439",
515
763
  "CVE-2024-20767",
516
764
  "CVE-2024-20953",
765
+ "CVE-2024-21287",
517
766
  "CVE-2024-21413",
767
+ "CVE-2024-21626",
518
768
  "CVE-2024-21887",
519
769
  "CVE-2024-21893",
520
770
  "CVE-2024-23113",
521
771
  "CVE-2024-23222",
522
772
  "CVE-2024-23225",
523
773
  "CVE-2024-23296",
774
+ "CVE-2024-23897",
775
+ "CVE-2024-24919",
524
776
  "CVE-2024-26169",
525
777
  "CVE-2024-27198",
778
+ "CVE-2024-27199",
526
779
  "CVE-2024-27348",
780
+ "CVE-2024-27443",
781
+ "CVE-2024-28986",
527
782
  "CVE-2024-28995",
528
783
  "CVE-2024-29745",
529
784
  "CVE-2024-29748",
530
785
  "CVE-2024-29824",
531
786
  "CVE-2024-30051",
532
787
  "CVE-2024-30088",
788
+ "CVE-2024-3094",
533
789
  "CVE-2024-32113",
534
790
  "CVE-2024-3272",
535
791
  "CVE-2024-3273",
536
792
  "CVE-2024-3393",
537
793
  "CVE-2024-3400",
794
+ "CVE-2024-34102",
538
795
  "CVE-2024-35250",
539
796
  "CVE-2024-36401",
540
797
  "CVE-2024-36971",
798
+ "CVE-2024-37079",
541
799
  "CVE-2024-38014",
542
800
  "CVE-2024-38080",
801
+ "CVE-2024-38094",
543
802
  "CVE-2024-38106",
544
803
  "CVE-2024-38107",
545
804
  "CVE-2024-38178",
@@ -547,98 +806,295 @@
547
806
  "CVE-2024-38475",
548
807
  "CVE-2024-38812",
549
808
  "CVE-2024-38813",
809
+ "CVE-2024-38856",
810
+ "CVE-2024-4040",
811
+ "CVE-2024-40635",
550
812
  "CVE-2024-40711",
551
813
  "CVE-2024-40766",
552
814
  "CVE-2024-40890",
553
815
  "CVE-2024-40891",
554
816
  "CVE-2024-43047",
817
+ "CVE-2024-43451",
818
+ "CVE-2024-43468",
819
+ "CVE-2024-4358",
555
820
  "CVE-2024-44309",
556
821
  "CVE-2024-45195",
557
822
  "CVE-2024-45519",
823
+ "CVE-2024-4577",
558
824
  "CVE-2024-4610",
559
825
  "CVE-2024-4671",
560
826
  "CVE-2024-47575",
561
827
  "CVE-2024-4761",
562
828
  "CVE-2024-48248",
829
+ "CVE-2024-4879",
563
830
  "CVE-2024-4885",
564
831
  "CVE-2024-49035",
565
832
  "CVE-2024-49138",
566
833
  "CVE-2024-50302",
567
834
  "CVE-2024-50603",
835
+ "CVE-2024-50623",
568
836
  "CVE-2024-51378",
569
837
  "CVE-2024-51567",
838
+ "CVE-2024-5217",
570
839
  "CVE-2024-5274",
571
840
  "CVE-2024-53104",
572
841
  "CVE-2024-53150",
573
842
  "CVE-2024-53197",
574
843
  "CVE-2024-53704",
844
+ "CVE-2024-54085",
575
845
  "CVE-2024-55550",
576
846
  "CVE-2024-55591",
847
+ "CVE-2024-57726",
577
848
  "CVE-2024-57727",
849
+ "CVE-2024-57728",
578
850
  "CVE-2024-57968",
579
851
  "CVE-2024-58136",
580
852
  "CVE-2024-5910",
853
+ "CVE-2024-6670",
854
+ "CVE-2024-7399",
581
855
  "CVE-2024-7593",
856
+ "CVE-2024-7694",
582
857
  "CVE-2024-7965",
858
+ "CVE-2024-8068",
859
+ "CVE-2024-8069",
583
860
  "CVE-2024-8190",
584
861
  "CVE-2024-8956",
585
862
  "CVE-2024-9379",
586
863
  "CVE-2024-9380",
864
+ "CVE-2024-9465",
587
865
  "CVE-2024-9474",
866
+ "CVE-2024-9537",
588
867
  "CVE-2025-0108",
589
868
  "CVE-2025-0111",
869
+ "CVE-2025-0133",
590
870
  "CVE-2025-0994",
871
+ "CVE-2025-10035",
872
+ "CVE-2025-10585",
873
+ "CVE-2025-1094",
874
+ "CVE-2025-11371",
875
+ "CVE-2025-11837",
876
+ "CVE-2025-12480",
877
+ "CVE-2025-12686",
591
878
  "CVE-2025-1316",
879
+ "CVE-2025-14174",
880
+ "CVE-2025-14611",
881
+ "CVE-2025-14733",
882
+ "CVE-2025-14847",
883
+ "CVE-2025-15556",
592
884
  "CVE-2025-1976",
885
+ "CVE-2025-20281",
886
+ "CVE-2025-20333",
887
+ "CVE-2025-20337",
888
+ "CVE-2025-20352",
889
+ "CVE-2025-20362",
890
+ "CVE-2025-20393",
891
+ "CVE-2025-21042",
892
+ "CVE-2025-21043",
593
893
  "CVE-2025-21333",
594
894
  "CVE-2025-21334",
595
895
  "CVE-2025-21335",
596
896
  "CVE-2025-21418",
897
+ "CVE-2025-21479",
898
+ "CVE-2025-21480",
597
899
  "CVE-2025-21590",
900
+ "CVE-2025-22224",
901
+ "CVE-2025-22225",
902
+ "CVE-2025-22226",
598
903
  "CVE-2025-23006",
599
904
  "CVE-2025-23209",
905
+ "CVE-2025-24016",
600
906
  "CVE-2025-24054",
601
907
  "CVE-2025-24085",
908
+ "CVE-2025-24201",
602
909
  "CVE-2025-24472",
603
910
  "CVE-2025-24813",
911
+ "CVE-2025-24893",
604
912
  "CVE-2025-24983",
605
913
  "CVE-2025-24984",
606
914
  "CVE-2025-24985",
607
915
  "CVE-2025-24989",
916
+ "CVE-2025-24990",
608
917
  "CVE-2025-24991",
609
918
  "CVE-2025-24993",
610
919
  "CVE-2025-25181",
920
+ "CVE-2025-25257",
921
+ "CVE-2025-26399",
611
922
  "CVE-2025-26633",
923
+ "CVE-2025-27038",
924
+ "CVE-2025-2746",
925
+ "CVE-2025-2747",
926
+ "CVE-2025-2749",
927
+ "CVE-2025-2775",
928
+ "CVE-2025-2776",
612
929
  "CVE-2025-2783",
930
+ "CVE-2025-27920",
931
+ "CVE-2025-29635",
613
932
  "CVE-2025-29824",
614
933
  "CVE-2025-30406",
615
934
  "CVE-2025-31200",
616
935
  "CVE-2025-31201",
936
+ "CVE-2025-31277",
937
+ "CVE-2025-32432",
938
+ "CVE-2025-32433",
939
+ "CVE-2025-32463",
940
+ "CVE-2025-32701",
941
+ "CVE-2025-32706",
942
+ "CVE-2025-32709",
943
+ "CVE-2025-32756",
944
+ "CVE-2025-33073",
945
+ "CVE-2025-34026",
617
946
  "CVE-2025-34028",
947
+ "CVE-2025-35939",
948
+ "CVE-2025-37164",
949
+ "CVE-2025-38352",
618
950
  "CVE-2025-3928",
951
+ "CVE-2025-3935",
952
+ "CVE-2025-4008",
953
+ "CVE-2025-40536",
954
+ "CVE-2025-40551",
955
+ "CVE-2025-40602",
956
+ "CVE-2025-41244",
619
957
  "CVE-2025-42599",
958
+ "CVE-2025-42999",
959
+ "CVE-2025-43200",
960
+ "CVE-2025-43300",
961
+ "CVE-2025-43510",
962
+ "CVE-2025-43520",
963
+ "CVE-2025-43529",
964
+ "CVE-2025-4427",
965
+ "CVE-2025-4428",
966
+ "CVE-2025-4632",
967
+ "CVE-2025-47812",
968
+ "CVE-2025-47813",
969
+ "CVE-2025-47827",
970
+ "CVE-2025-48384",
971
+ "CVE-2025-48543",
972
+ "CVE-2025-48572",
973
+ "CVE-2025-48633",
974
+ "CVE-2025-48703",
975
+ "CVE-2025-49113",
976
+ "CVE-2025-49704",
977
+ "CVE-2025-49706",
978
+ "CVE-2025-5086",
979
+ "CVE-2025-52691",
980
+ "CVE-2025-53521",
981
+ "CVE-2025-53770",
982
+ "CVE-2025-54068",
983
+ "CVE-2025-5419",
984
+ "CVE-2025-54236",
985
+ "CVE-2025-54253",
986
+ "CVE-2025-54309",
987
+ "CVE-2025-54948",
988
+ "CVE-2025-55177",
989
+ "CVE-2025-55182",
990
+ "CVE-2025-57819",
991
+ "CVE-2025-58034",
992
+ "CVE-2025-58360",
993
+ "CVE-2025-59230",
994
+ "CVE-2025-59287",
995
+ "CVE-2025-59389",
996
+ "CVE-2025-59529",
997
+ "CVE-2025-59689",
998
+ "CVE-2025-59718",
999
+ "CVE-2025-60710",
1000
+ "CVE-2025-61757",
1001
+ "CVE-2025-61882",
1002
+ "CVE-2025-61884",
1003
+ "CVE-2025-61932",
1004
+ "CVE-2025-6204",
1005
+ "CVE-2025-6205",
1006
+ "CVE-2025-6218",
1007
+ "CVE-2025-62215",
1008
+ "CVE-2025-62221",
1009
+ "CVE-2025-62847",
1010
+ "CVE-2025-62848",
1011
+ "CVE-2025-62849",
1012
+ "CVE-2025-64328",
1013
+ "CVE-2025-64446",
1014
+ "CVE-2025-6543",
1015
+ "CVE-2025-6554",
1016
+ "CVE-2025-66644",
620
1017
  "CVE-2025-67038",
1018
+ "CVE-2025-68613",
1019
+ "CVE-2025-68645",
1020
+ "CVE-2025-68686",
1021
+ "CVE-2025-6965",
1022
+ "CVE-2025-7775",
1023
+ "CVE-2025-8110",
1024
+ "CVE-2025-8875",
1025
+ "CVE-2025-8876",
1026
+ "CVE-2025-9242",
1027
+ "CVE-2025-9377",
1028
+ "CVE-2026-0300",
621
1029
  "CVE-2026-12569",
1030
+ "CVE-2026-1281",
1031
+ "CVE-2026-1340",
622
1032
  "CVE-2026-15410",
1033
+ "CVE-2026-1603",
1034
+ "CVE-2026-16812",
1035
+ "CVE-2026-1731",
1036
+ "CVE-2026-20045",
1037
+ "CVE-2026-20122",
1038
+ "CVE-2026-20127",
1039
+ "CVE-2026-20128",
1040
+ "CVE-2026-20131",
1041
+ "CVE-2026-20133",
623
1042
  "CVE-2026-20230",
624
1043
  "CVE-2026-20253",
625
1044
  "CVE-2026-20262",
1045
+ "CVE-2026-20700",
1046
+ "CVE-2026-20805",
1047
+ "CVE-2026-20963",
1048
+ "CVE-2026-21385",
1049
+ "CVE-2026-21510",
1050
+ "CVE-2026-21519",
1051
+ "CVE-2026-21525",
1052
+ "CVE-2026-21533",
1053
+ "CVE-2026-21643",
1054
+ "CVE-2026-22719",
1055
+ "CVE-2026-22769",
1056
+ "CVE-2026-23760",
1057
+ "CVE-2026-2441",
1058
+ "CVE-2026-24423",
1059
+ "CVE-2026-24858",
626
1060
  "CVE-2026-25089",
1061
+ "CVE-2026-25108",
1062
+ "CVE-2026-3055",
1063
+ "CVE-2026-31431",
1064
+ "CVE-2026-31635",
1065
+ "CVE-2026-33634",
1066
+ "CVE-2026-33825",
1067
+ "CVE-2026-34197",
627
1068
  "CVE-2026-34908",
628
1069
  "CVE-2026-34909",
629
1070
  "CVE-2026-34910",
1071
+ "CVE-2026-3502",
1072
+ "CVE-2026-35616",
1073
+ "CVE-2026-3909",
630
1074
  "CVE-2026-39808",
1075
+ "CVE-2026-41940",
1076
+ "CVE-2026-42208",
1077
+ "CVE-2026-42945",
1078
+ "CVE-2026-43284",
1079
+ "CVE-2026-43500",
1080
+ "CVE-2026-45321",
631
1081
  "CVE-2026-45659",
632
1082
  "CVE-2026-46817",
1083
+ "CVE-2026-48282",
633
1084
  "CVE-2026-48558",
634
1085
  "CVE-2026-48907",
1086
+ "CVE-2026-50522",
635
1087
  "CVE-2026-54420",
1088
+ "CVE-2026-55255",
636
1089
  "CVE-2026-56155",
637
1090
  "CVE-2026-56164",
638
1091
  "CVE-2026-56290",
639
1092
  "CVE-2026-56291",
1093
+ "CVE-2026-58644",
640
1094
  "CVE-2026-60137",
641
- "CVE-2026-63030"
1095
+ "CVE-2026-63030",
1096
+ "CVE-2026-6973",
1097
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP"
642
1098
  ],
643
1099
  "atlas_refs": [],
644
1100
  "attack_refs": [
@@ -1539,7 +1995,12 @@
1539
1995
  "real_requirement": "A.8.16 must be extended with AI-specific monitoring: LLM API query monitoring (which processes query which APIs), behavioral baseline for expected AI tool usage patterns, alerting on AI API queries from unexpected processes or at unexpected volumes.",
1540
1996
  "status": "open",
1541
1997
  "opened_date": "2026-02-01",
1542
- "evidence_cves": [],
1998
+ "evidence_cves": [
1999
+ "CVE-2024-1212",
2000
+ "CVE-2024-12686",
2001
+ "CVE-2026-15409",
2002
+ "CVE-2026-42897"
2003
+ ],
1543
2004
  "atlas_refs": [
1544
2005
  "AML.T0096"
1545
2006
  ],
@@ -1573,13 +2034,23 @@
1573
2034
  "status": "open",
1574
2035
  "opened_date": "2026-05-17",
1575
2036
  "evidence_cves": [
2037
+ "CVE-2004-1464",
1576
2038
  "CVE-2022-0492",
2039
+ "CVE-2022-31199",
1577
2040
  "CVE-2022-36551",
2041
+ "CVE-2023-21839",
2042
+ "CVE-2023-23397",
1578
2043
  "CVE-2024-0132",
1579
2044
  "CVE-2024-21626",
2045
+ "CVE-2024-3154",
2046
+ "CVE-2024-47575",
2047
+ "CVE-2024-49039",
2048
+ "CVE-2024-9474",
1580
2049
  "CVE-2025-23266",
1581
2050
  "CVE-2025-25297",
2051
+ "CVE-2025-53767",
1582
2052
  "CVE-2025-56520",
2053
+ "CVE-2026-16812",
1583
2054
  "CVE-2026-22219",
1584
2055
  "CVE-2026-7473"
1585
2056
  ],
@@ -1613,37 +2084,53 @@
1613
2084
  "status": "open",
1614
2085
  "opened_date": "2026-01-01",
1615
2086
  "evidence_cves": [
2087
+ "CVE-2020-29574",
2088
+ "CVE-2020-35730",
2089
+ "CVE-2022-39197",
2090
+ "CVE-2023-37580",
1616
2091
  "CVE-2023-43472",
1617
2092
  "CVE-2023-6016",
1618
2093
  "CVE-2023-6571",
2094
+ "CVE-2024-12356",
1619
2095
  "CVE-2024-12366",
1620
2096
  "CVE-2024-24590",
1621
2097
  "CVE-2024-24591",
1622
2098
  "CVE-2024-2912",
1623
2099
  "CVE-2024-31462",
2100
+ "CVE-2024-32113",
1624
2101
  "CVE-2024-37052",
1625
2102
  "CVE-2024-37060",
2103
+ "CVE-2024-51378",
1626
2104
  "CVE-2024-5565",
1627
2105
  "CVE-2024-9526",
1628
2106
  "CVE-2025-0133",
2107
+ "CVE-2025-0994",
1629
2108
  "CVE-2025-10164",
1630
2109
  "CVE-2025-1094",
2110
+ "CVE-2025-23006",
1631
2111
  "CVE-2025-27363",
1632
2112
  "CVE-2025-27520",
1633
2113
  "CVE-2025-3248",
1634
2114
  "CVE-2025-3466",
1635
2115
  "CVE-2025-51480",
2116
+ "CVE-2025-55319",
2117
+ "CVE-2025-68664",
2118
+ "CVE-2025-68665",
1636
2119
  "CVE-2025-68668",
1637
2120
  "CVE-2025-6965",
1638
2121
  "CVE-2026-10520",
2122
+ "CVE-2026-15410",
1639
2123
  "CVE-2026-20245",
1640
2124
  "CVE-2026-21858",
1641
2125
  "CVE-2026-21877",
1642
2126
  "CVE-2026-22218",
2127
+ "CVE-2026-22778",
1643
2128
  "CVE-2026-30623",
1644
2129
  "CVE-2026-31229",
1645
2130
  "CVE-2026-31230",
1646
2131
  "CVE-2026-33017",
2132
+ "CVE-2026-39884",
2133
+ "CVE-2026-42208",
1647
2134
  "CVE-2026-42271",
1648
2135
  "CVE-2026-45247",
1649
2136
  "CVE-2026-5760"
@@ -1738,8 +2225,10 @@
1738
2225
  "CVE-2012-4792",
1739
2226
  "CVE-2013-0643",
1740
2227
  "CVE-2013-0648",
2228
+ "CVE-2013-3163",
1741
2229
  "CVE-2013-3893",
1742
2230
  "CVE-2013-3918",
2231
+ "CVE-2014-0196",
1743
2232
  "CVE-2014-0497",
1744
2233
  "CVE-2014-0502",
1745
2234
  "CVE-2014-100005",
@@ -1747,16 +2236,21 @@
1747
2236
  "CVE-2014-3931",
1748
2237
  "CVE-2014-6278",
1749
2238
  "CVE-2014-8361",
2239
+ "CVE-2015-5317",
1750
2240
  "CVE-2015-7755",
2241
+ "CVE-2016-0165",
1751
2242
  "CVE-2016-10033",
1752
2243
  "CVE-2016-20017",
1753
2244
  "CVE-2016-3714",
1754
2245
  "CVE-2016-7836",
2246
+ "CVE-2016-9079",
1755
2247
  "CVE-2017-1000253",
1756
2248
  "CVE-2017-1000353",
1757
2249
  "CVE-2017-12637",
2250
+ "CVE-2017-18368",
1758
2251
  "CVE-2017-3066",
1759
2252
  "CVE-2017-3506",
2253
+ "CVE-2017-6742",
1760
2254
  "CVE-2017-6884",
1761
2255
  "CVE-2017-7921",
1762
2256
  "CVE-2018-0824",
@@ -1767,15 +2261,20 @@
1767
2261
  "CVE-2018-4063",
1768
2262
  "CVE-2018-8639",
1769
2263
  "CVE-2019-0344",
2264
+ "CVE-2019-1388",
1770
2265
  "CVE-2019-16278",
2266
+ "CVE-2019-17621",
1771
2267
  "CVE-2019-19006",
2268
+ "CVE-2019-20500",
1772
2269
  "CVE-2019-5418",
1773
2270
  "CVE-2019-6693",
2271
+ "CVE-2019-8526",
1774
2272
  "CVE-2019-9621",
1775
2273
  "CVE-2019-9874",
1776
2274
  "CVE-2019-9875",
1777
2275
  "CVE-2020-0618",
1778
2276
  "CVE-2020-11023",
2277
+ "CVE-2020-12641",
1779
2278
  "CVE-2020-13965",
1780
2279
  "CVE-2020-14644",
1781
2280
  "CVE-2020-15069",
@@ -1785,6 +2284,7 @@
1785
2284
  "CVE-2020-25078",
1786
2285
  "CVE-2020-25079",
1787
2286
  "CVE-2020-2551",
2287
+ "CVE-2020-2883",
1788
2288
  "CVE-2020-3259",
1789
2289
  "CVE-2020-7796",
1790
2290
  "CVE-2020-9715",
@@ -1796,61 +2296,114 @@
1796
2296
  "CVE-2021-22175",
1797
2297
  "CVE-2021-22555",
1798
2298
  "CVE-2021-22681",
2299
+ "CVE-2021-25371",
2300
+ "CVE-2021-25372",
2301
+ "CVE-2021-25394",
2302
+ "CVE-2021-25395",
2303
+ "CVE-2021-25487",
2304
+ "CVE-2021-25489",
1799
2305
  "CVE-2021-26086",
1800
2306
  "CVE-2021-26828",
1801
2307
  "CVE-2021-26829",
1802
2308
  "CVE-2021-27137",
2309
+ "CVE-2021-27878",
2310
+ "CVE-2021-29256",
2311
+ "CVE-2021-30900",
1803
2312
  "CVE-2021-30952",
1804
2313
  "CVE-2021-31196",
1805
2314
  "CVE-2021-3129",
1806
2315
  "CVE-2021-32030",
1807
2316
  "CVE-2021-33044",
2317
+ "CVE-2021-33045",
1808
2318
  "CVE-2021-33515",
2319
+ "CVE-2021-3560",
1809
2320
  "CVE-2021-36380",
1810
2321
  "CVE-2021-38371",
2322
+ "CVE-2021-39144",
1811
2323
  "CVE-2021-39935",
1812
2324
  "CVE-2021-40655",
1813
2325
  "CVE-2021-43226",
1814
2326
  "CVE-2021-43798",
2327
+ "CVE-2021-44026",
1815
2328
  "CVE-2021-44529",
2329
+ "CVE-2021-45046",
1816
2330
  "CVE-2022-0185",
1817
2331
  "CVE-2022-1471",
1818
2332
  "CVE-2022-20775",
1819
2333
  "CVE-2022-21445",
1820
2334
  "CVE-2022-22071",
1821
2335
  "CVE-2022-22265",
2336
+ "CVE-2022-22706",
1822
2337
  "CVE-2022-23227",
1823
2338
  "CVE-2022-23748",
1824
2339
  "CVE-2022-24816",
1825
2340
  "CVE-2022-2586",
2341
+ "CVE-2022-27926",
2342
+ "CVE-2022-29303",
2343
+ "CVE-2022-3038",
1826
2344
  "CVE-2022-37055",
1827
2345
  "CVE-2022-38028",
2346
+ "CVE-2022-38181",
1828
2347
  "CVE-2022-40799",
2348
+ "CVE-2022-41328",
2349
+ "CVE-2022-42948",
1829
2350
  "CVE-2022-43769",
1830
2351
  "CVE-2022-43939",
1831
2352
  "CVE-2022-48503",
1832
2353
  "CVE-2022-48618",
2354
+ "CVE-2023-0266",
1833
2355
  "CVE-2023-0386",
2356
+ "CVE-2023-1389",
1834
2357
  "CVE-2023-1671",
1835
2358
  "CVE-2023-20109",
1836
2359
  "CVE-2023-20118",
2360
+ "CVE-2023-2033",
2361
+ "CVE-2023-20887",
2362
+ "CVE-2023-20963",
1837
2363
  "CVE-2023-21237",
2364
+ "CVE-2023-2136",
1838
2365
  "CVE-2023-21529",
1839
2366
  "CVE-2023-21608",
1840
2367
  "CVE-2023-22515",
1841
2368
  "CVE-2023-22518",
1842
2369
  "CVE-2023-22527",
1843
2370
  "CVE-2023-23752",
2371
+ "CVE-2023-24489",
1844
2372
  "CVE-2023-24955",
1845
2373
  "CVE-2023-2533",
2374
+ "CVE-2023-25717",
2375
+ "CVE-2023-26083",
2376
+ "CVE-2023-26359",
2377
+ "CVE-2023-26360",
1846
2378
  "CVE-2023-26369",
2379
+ "CVE-2023-27350",
1847
2380
  "CVE-2023-27351",
2381
+ "CVE-2023-27992",
2382
+ "CVE-2023-27997",
2383
+ "CVE-2023-28204",
2384
+ "CVE-2023-28205",
2385
+ "CVE-2023-28206",
1848
2386
  "CVE-2023-28229",
2387
+ "CVE-2023-28252",
1849
2388
  "CVE-2023-28434",
1850
2389
  "CVE-2023-28461",
2390
+ "CVE-2023-2868",
2391
+ "CVE-2023-28771",
1851
2392
  "CVE-2023-29300",
2393
+ "CVE-2023-29336",
1852
2394
  "CVE-2023-29357",
1853
2395
  "CVE-2023-29360",
2396
+ "CVE-2023-29492",
2397
+ "CVE-2023-3079",
2398
+ "CVE-2023-32046",
2399
+ "CVE-2023-32315",
2400
+ "CVE-2023-32373",
2401
+ "CVE-2023-32409",
2402
+ "CVE-2023-32434",
2403
+ "CVE-2023-32435",
2404
+ "CVE-2023-32439",
2405
+ "CVE-2023-33009",
2406
+ "CVE-2023-33010",
1854
2407
  "CVE-2023-33063",
1855
2408
  "CVE-2023-33106",
1856
2409
  "CVE-2023-33107",
@@ -1858,7 +2411,11 @@
1858
2411
  "CVE-2023-33538",
1859
2412
  "CVE-2023-34048",
1860
2413
  "CVE-2023-34192",
2414
+ "CVE-2023-34362",
2415
+ "CVE-2023-35081",
1861
2416
  "CVE-2023-35082",
2417
+ "CVE-2023-3519",
2418
+ "CVE-2023-35311",
1862
2419
  "CVE-2023-35674",
1863
2420
  "CVE-2023-36033",
1864
2421
  "CVE-2023-36036",
@@ -1871,7 +2428,13 @@
1871
2428
  "CVE-2023-36846",
1872
2429
  "CVE-2023-36847",
1873
2430
  "CVE-2023-36851",
2431
+ "CVE-2023-36874",
2432
+ "CVE-2023-36884",
2433
+ "CVE-2023-37450",
2434
+ "CVE-2023-38180",
1874
2435
  "CVE-2023-38203",
2436
+ "CVE-2023-38205",
2437
+ "CVE-2023-38606",
1875
2438
  "CVE-2023-38831",
1876
2439
  "CVE-2023-38950",
1877
2440
  "CVE-2023-39780",
@@ -1940,6 +2503,8 @@
1940
2503
  "CVE-2024-11392",
1941
2504
  "CVE-2024-11393",
1942
2505
  "CVE-2024-11394",
2506
+ "CVE-2024-11667",
2507
+ "CVE-2024-11680",
1943
2508
  "CVE-2024-12987",
1944
2509
  "CVE-2024-13059",
1945
2510
  "CVE-2024-13159",
@@ -1954,12 +2519,14 @@
1954
2519
  "CVE-2024-20953",
1955
2520
  "CVE-2024-21287",
1956
2521
  "CVE-2024-21338",
2522
+ "CVE-2024-21413",
1957
2523
  "CVE-2024-21513",
1958
2524
  "CVE-2024-21575",
1959
2525
  "CVE-2024-21576",
1960
2526
  "CVE-2024-21762",
1961
2527
  "CVE-2024-21887",
1962
2528
  "CVE-2024-21893",
2529
+ "CVE-2024-23113",
1963
2530
  "CVE-2024-23222",
1964
2531
  "CVE-2024-23225",
1965
2532
  "CVE-2024-23296",
@@ -1972,12 +2539,15 @@
1972
2539
  "CVE-2024-27348",
1973
2540
  "CVE-2024-27443",
1974
2541
  "CVE-2024-28986",
2542
+ "CVE-2024-28987",
1975
2543
  "CVE-2024-28995",
1976
2544
  "CVE-2024-29745",
1977
2545
  "CVE-2024-29748",
1978
2546
  "CVE-2024-30051",
2547
+ "CVE-2024-30088",
1979
2548
  "CVE-2024-3273",
1980
2549
  "CVE-2024-32896",
2550
+ "CVE-2024-3400",
1981
2551
  "CVE-2024-34102",
1982
2552
  "CVE-2024-35250",
1983
2553
  "CVE-2024-36401",
@@ -1989,18 +2559,28 @@
1989
2559
  "CVE-2024-38094",
1990
2560
  "CVE-2024-38106",
1991
2561
  "CVE-2024-38107",
2562
+ "CVE-2024-38112",
1992
2563
  "CVE-2024-38178",
1993
2564
  "CVE-2024-38189",
1994
2565
  "CVE-2024-38193",
1995
2566
  "CVE-2024-38475",
2567
+ "CVE-2024-38812",
2568
+ "CVE-2024-38813",
1996
2569
  "CVE-2024-38856",
1997
2570
  "CVE-2024-39722",
1998
2571
  "CVE-2024-4040",
2572
+ "CVE-2024-40635",
2573
+ "CVE-2024-40891",
2574
+ "CVE-2024-41713",
1999
2575
  "CVE-2024-42009",
2000
2576
  "CVE-2024-42478",
2001
2577
  "CVE-2024-42479",
2578
+ "CVE-2024-43047",
2002
2579
  "CVE-2024-43468",
2580
+ "CVE-2024-43572",
2581
+ "CVE-2024-43573",
2003
2582
  "CVE-2024-4358",
2583
+ "CVE-2024-44308",
2004
2584
  "CVE-2024-44309",
2005
2585
  "CVE-2024-4610",
2006
2586
  "CVE-2024-4671",
@@ -2010,9 +2590,11 @@
2010
2590
  "CVE-2024-4885",
2011
2591
  "CVE-2024-4889",
2012
2592
  "CVE-2024-49035",
2593
+ "CVE-2024-49138",
2013
2594
  "CVE-2024-4947",
2014
2595
  "CVE-2024-50050",
2015
2596
  "CVE-2024-50302",
2597
+ "CVE-2024-50603",
2016
2598
  "CVE-2024-51567",
2017
2599
  "CVE-2024-5217",
2018
2600
  "CVE-2024-5274",
@@ -2020,6 +2602,8 @@
2020
2602
  "CVE-2024-53197",
2021
2603
  "CVE-2024-53704",
2022
2604
  "CVE-2024-54085",
2605
+ "CVE-2024-55550",
2606
+ "CVE-2024-55591",
2023
2607
  "CVE-2024-56145",
2024
2608
  "CVE-2024-57726",
2025
2609
  "CVE-2024-57727",
@@ -2038,6 +2622,7 @@
2038
2622
  "CVE-2024-8069",
2039
2623
  "CVE-2024-8190",
2040
2624
  "CVE-2024-8963",
2625
+ "CVE-2024-9380",
2041
2626
  "CVE-2024-9463",
2042
2627
  "CVE-2024-9465",
2043
2628
  "CVE-2025-0111",
@@ -2047,6 +2632,7 @@
2047
2632
  "CVE-2025-11371",
2048
2633
  "CVE-2025-11953",
2049
2634
  "CVE-2025-12480",
2635
+ "CVE-2025-12686",
2050
2636
  "CVE-2025-1316",
2051
2637
  "CVE-2025-13223",
2052
2638
  "CVE-2025-14174",
@@ -2064,6 +2650,9 @@
2064
2650
  "CVE-2025-20393",
2065
2651
  "CVE-2025-21042",
2066
2652
  "CVE-2025-21043",
2653
+ "CVE-2025-21333",
2654
+ "CVE-2025-21334",
2655
+ "CVE-2025-21335",
2067
2656
  "CVE-2025-21391",
2068
2657
  "CVE-2025-21418",
2069
2658
  "CVE-2025-21479",
@@ -2170,6 +2759,7 @@
2170
2759
  "CVE-2025-53521",
2171
2760
  "CVE-2025-53690",
2172
2761
  "CVE-2025-53770",
2762
+ "CVE-2025-53773",
2173
2763
  "CVE-2025-54068",
2174
2764
  "CVE-2025-54136",
2175
2765
  "CVE-2025-5419",
@@ -2200,6 +2790,9 @@
2200
2790
  "CVE-2025-6218",
2201
2791
  "CVE-2025-62215",
2202
2792
  "CVE-2025-62221",
2793
+ "CVE-2025-62847",
2794
+ "CVE-2025-62848",
2795
+ "CVE-2025-62849",
2203
2796
  "CVE-2025-64328",
2204
2797
  "CVE-2025-64446",
2205
2798
  "CVE-2025-64496",
@@ -2214,6 +2807,7 @@
2214
2807
  "CVE-2025-68461",
2215
2808
  "CVE-2025-68613",
2216
2809
  "CVE-2025-68645",
2810
+ "CVE-2025-68686",
2217
2811
  "CVE-2025-7775",
2218
2812
  "CVE-2025-8088",
2219
2813
  "CVE-2025-8110",
@@ -2265,6 +2859,7 @@
2265
2859
  "CVE-2026-2441",
2266
2860
  "CVE-2026-24423",
2267
2861
  "CVE-2026-24858",
2862
+ "CVE-2026-25089",
2268
2863
  "CVE-2026-25108",
2269
2864
  "CVE-2026-25592",
2270
2865
  "CVE-2026-26015",
@@ -2293,10 +2888,13 @@
2293
2888
  "CVE-2026-35616",
2294
2889
  "CVE-2026-3909",
2295
2890
  "CVE-2026-3910",
2891
+ "CVE-2026-39808",
2296
2892
  "CVE-2026-40933",
2297
2893
  "CVE-2026-41091",
2298
2894
  "CVE-2026-41940",
2299
2895
  "CVE-2026-42945",
2896
+ "CVE-2026-43284",
2897
+ "CVE-2026-43500",
2300
2898
  "CVE-2026-45247",
2301
2899
  "CVE-2026-45498",
2302
2900
  "CVE-2026-45659",
@@ -2310,6 +2908,7 @@
2310
2908
  "CVE-2026-48558",
2311
2909
  "CVE-2026-48907",
2312
2910
  "CVE-2026-48908",
2911
+ "CVE-2026-50522",
2313
2912
  "CVE-2026-50751",
2314
2913
  "CVE-2026-5281",
2315
2914
  "CVE-2026-54420",
@@ -2460,6 +3059,8 @@
2460
3059
  "status": "open",
2461
3060
  "opened_date": "2026-05-13",
2462
3061
  "evidence_cves": [
3062
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
3063
+ "CVE-2021-44026",
2463
3064
  "CVE-2023-21237",
2464
3065
  "CVE-2023-21608",
2465
3066
  "CVE-2023-22515",
@@ -2472,6 +3073,7 @@
2472
3073
  "CVE-2023-4966",
2473
3074
  "CVE-2023-5631",
2474
3075
  "CVE-2023-7028",
3076
+ "CVE-2024-11182",
2475
3077
  "CVE-2024-21412",
2476
3078
  "CVE-2024-26169",
2477
3079
  "CVE-2024-29988",
@@ -2480,6 +3082,7 @@
2480
3082
  "CVE-2024-38094",
2481
3083
  "CVE-2024-38193",
2482
3084
  "CVE-2024-38213",
3085
+ "CVE-2024-38217",
2483
3086
  "CVE-2024-38226",
2484
3087
  "CVE-2024-43451",
2485
3088
  "CVE-2024-49039",
@@ -2489,6 +3092,13 @@
2489
3092
  "CVE-2024-55956",
2490
3093
  "CVE-2024-7971",
2491
3094
  "CVE-2025-21391",
3095
+ "CVE-2025-24016",
3096
+ "CVE-2025-27915",
3097
+ "CVE-2025-43200",
3098
+ "CVE-2025-48700",
3099
+ "CVE-2025-55177",
3100
+ "CVE-2025-59689",
3101
+ "CVE-2026-32202",
2492
3102
  "CVE-2026-39987",
2493
3103
  "CVE-2026-42208",
2494
3104
  "CVE-2026-42897",
@@ -2528,39 +3138,129 @@
2528
3138
  "status": "open",
2529
3139
  "opened_date": "2026-03-15",
2530
3140
  "evidence_cves": [
3141
+ "CVE-2007-0671",
3142
+ "CVE-2009-0238",
3143
+ "CVE-2009-0556",
3144
+ "CVE-2009-1537",
3145
+ "CVE-2010-0249",
3146
+ "CVE-2010-3765",
3147
+ "CVE-2010-3962",
3148
+ "CVE-2011-3402",
3149
+ "CVE-2012-1854",
3150
+ "CVE-2013-3163",
3151
+ "CVE-2013-3918",
3152
+ "CVE-2014-0196",
3153
+ "CVE-2016-0165",
3154
+ "CVE-2016-3427",
3155
+ "CVE-2016-9079",
2531
3156
  "CVE-2017-1000253",
3157
+ "CVE-2017-18368",
3158
+ "CVE-2017-7494",
2532
3159
  "CVE-2018-0824",
3160
+ "CVE-2019-1388",
3161
+ "CVE-2019-17621",
3162
+ "CVE-2019-20500",
3163
+ "CVE-2019-8526",
2533
3164
  "CVE-2020-0618",
3165
+ "CVE-2020-12641",
2534
3166
  "CVE-2020-15415",
3167
+ "CVE-2020-35730",
3168
+ "CVE-2020-9715",
3169
+ "CVE-2021-22555",
3170
+ "CVE-2021-25372",
3171
+ "CVE-2021-25394",
3172
+ "CVE-2021-25487",
3173
+ "CVE-2021-25489",
3174
+ "CVE-2021-27876",
3175
+ "CVE-2021-27877",
3176
+ "CVE-2021-27878",
3177
+ "CVE-2021-29256",
3178
+ "CVE-2021-30900",
3179
+ "CVE-2021-30952",
2535
3180
  "CVE-2021-31196",
2536
3181
  "CVE-2021-3129",
2537
3182
  "CVE-2021-41277",
3183
+ "CVE-2021-43226",
2538
3184
  "CVE-2022-0185",
2539
3185
  "CVE-2022-1471",
2540
3186
  "CVE-2022-22071",
3187
+ "CVE-2022-22706",
2541
3188
  "CVE-2022-2586",
3189
+ "CVE-2022-27926",
3190
+ "CVE-2022-29303",
3191
+ "CVE-2022-3038",
3192
+ "CVE-2022-31199",
3193
+ "CVE-2022-38181",
3194
+ "CVE-2022-42948",
3195
+ "CVE-2022-48503",
2542
3196
  "CVE-2022-48618",
3197
+ "CVE-2023-0266",
3198
+ "CVE-2023-0386",
3199
+ "CVE-2023-1389",
3200
+ "CVE-2023-2033",
3201
+ "CVE-2023-20887",
3202
+ "CVE-2023-20963",
3203
+ "CVE-2023-2136",
3204
+ "CVE-2023-21492",
2543
3205
  "CVE-2023-22527",
3206
+ "CVE-2023-24489",
3207
+ "CVE-2023-24880",
3208
+ "CVE-2023-26359",
3209
+ "CVE-2023-26360",
3210
+ "CVE-2023-27350",
3211
+ "CVE-2023-27992",
3212
+ "CVE-2023-27997",
3213
+ "CVE-2023-28204",
3214
+ "CVE-2023-28205",
3215
+ "CVE-2023-28206",
2544
3216
  "CVE-2023-28229",
3217
+ "CVE-2023-28252",
3218
+ "CVE-2023-2868",
3219
+ "CVE-2023-28771",
3220
+ "CVE-2023-29298",
2545
3221
  "CVE-2023-29300",
3222
+ "CVE-2023-29336",
2546
3223
  "CVE-2023-29357",
2547
3224
  "CVE-2023-29360",
3225
+ "CVE-2023-29492",
3226
+ "CVE-2023-3079",
3227
+ "CVE-2023-32046",
3228
+ "CVE-2023-32049",
3229
+ "CVE-2023-32315",
3230
+ "CVE-2023-32373",
3231
+ "CVE-2023-32409",
3232
+ "CVE-2023-32434",
3233
+ "CVE-2023-32435",
3234
+ "CVE-2023-32439",
3235
+ "CVE-2023-33010",
2548
3236
  "CVE-2023-33063",
2549
3237
  "CVE-2023-33106",
2550
3238
  "CVE-2023-33107",
3239
+ "CVE-2023-34362",
3240
+ "CVE-2023-35081",
3241
+ "CVE-2023-35311",
2551
3242
  "CVE-2023-35674",
2552
3243
  "CVE-2023-36033",
2553
3244
  "CVE-2023-36036",
3245
+ "CVE-2023-36424",
2554
3246
  "CVE-2023-36563",
2555
3247
  "CVE-2023-36584",
2556
3248
  "CVE-2023-36802",
3249
+ "CVE-2023-36874",
3250
+ "CVE-2023-36884",
3251
+ "CVE-2023-37450",
3252
+ "CVE-2023-37580",
3253
+ "CVE-2023-38205",
3254
+ "CVE-2023-38606",
2557
3255
  "CVE-2023-38831",
2558
3256
  "CVE-2023-40044",
2559
3257
  "CVE-2023-41179",
3258
+ "CVE-2023-41974",
2560
3259
  "CVE-2023-41990",
2561
3260
  "CVE-2023-4211",
2562
3261
  "CVE-2023-42916",
2563
3262
  "CVE-2023-42917",
3263
+ "CVE-2023-43000",
2564
3264
  "CVE-2023-43654",
2565
3265
  "CVE-2023-44467",
2566
3266
  "CVE-2023-46604",
@@ -2583,6 +3283,7 @@
2583
3283
  "CVE-2024-11394",
2584
3284
  "CVE-2024-13059",
2585
3285
  "CVE-2024-1561",
3286
+ "CVE-2024-1709",
2586
3287
  "CVE-2024-21338",
2587
3288
  "CVE-2024-21351",
2588
3289
  "CVE-2024-21413",
@@ -2593,10 +3294,12 @@
2593
3294
  "CVE-2024-23225",
2594
3295
  "CVE-2024-23296",
2595
3296
  "CVE-2024-27132",
3297
+ "CVE-2024-27443",
2596
3298
  "CVE-2024-29745",
2597
3299
  "CVE-2024-29748",
2598
3300
  "CVE-2024-30051",
2599
3301
  "CVE-2024-30088",
3302
+ "CVE-2024-32896",
2600
3303
  "CVE-2024-35250",
2601
3304
  "CVE-2024-36971",
2602
3305
  "CVE-2024-37032",
@@ -2616,38 +3319,94 @@
2616
3319
  "CVE-2024-50050",
2617
3320
  "CVE-2024-5274",
2618
3321
  "CVE-2024-6587",
3322
+ "CVE-2024-7399",
2619
3323
  "CVE-2024-7965",
3324
+ "CVE-2024-8068",
2620
3325
  "CVE-2024-8190",
2621
3326
  "CVE-2025-10585",
2622
3327
  "CVE-2025-1094",
3328
+ "CVE-2025-13223",
2623
3329
  "CVE-2025-14174",
2624
3330
  "CVE-2025-1550",
2625
3331
  "CVE-2025-1753",
3332
+ "CVE-2025-20337",
3333
+ "CVE-2025-21042",
3334
+ "CVE-2025-21043",
2626
3335
  "CVE-2025-23254",
2627
3336
  "CVE-2025-23266",
3337
+ "CVE-2025-24201",
3338
+ "CVE-2025-24893",
3339
+ "CVE-2025-24990",
3340
+ "CVE-2025-25257",
3341
+ "CVE-2025-26399",
3342
+ "CVE-2025-27038",
3343
+ "CVE-2025-2747",
2628
3344
  "CVE-2025-30165",
2629
3345
  "CVE-2025-30202",
3346
+ "CVE-2025-30397",
3347
+ "CVE-2025-31277",
3348
+ "CVE-2025-32432",
3349
+ "CVE-2025-32433",
2630
3350
  "CVE-2025-32434",
2631
3351
  "CVE-2025-32444",
3352
+ "CVE-2025-32706",
3353
+ "CVE-2025-32709",
3354
+ "CVE-2025-33053",
2632
3355
  "CVE-2025-33236",
2633
3356
  "CVE-2025-34291",
2634
3357
  "CVE-2025-38352",
3358
+ "CVE-2025-41244",
2635
3359
  "CVE-2025-43300",
3360
+ "CVE-2025-43510",
3361
+ "CVE-2025-43520",
3362
+ "CVE-2025-4632",
3363
+ "CVE-2025-48543",
3364
+ "CVE-2025-48633",
3365
+ "CVE-2025-4919",
2636
3366
  "CVE-2025-49596",
3367
+ "CVE-2025-53521",
3368
+ "CVE-2025-53690",
2637
3369
  "CVE-2025-54136",
3370
+ "CVE-2025-5419",
3371
+ "CVE-2025-54236",
2638
3372
  "CVE-2025-60455",
3373
+ "CVE-2025-60710",
3374
+ "CVE-2025-6205",
3375
+ "CVE-2025-6218",
3376
+ "CVE-2025-62215",
3377
+ "CVE-2025-62221",
3378
+ "CVE-2025-64328",
2639
3379
  "CVE-2025-64496",
2640
3380
  "CVE-2025-64513",
3381
+ "CVE-2025-6554",
3382
+ "CVE-2025-66376",
3383
+ "CVE-2025-66644",
2641
3384
  "CVE-2025-67818",
3385
+ "CVE-2025-68686",
3386
+ "CVE-2025-7775",
2642
3387
  "CVE-2025-8747",
3388
+ "CVE-2025-8876",
3389
+ "CVE-2025-9377",
2643
3390
  "CVE-2026-0766",
3391
+ "CVE-2026-1281",
3392
+ "CVE-2026-1340",
3393
+ "CVE-2026-20045",
3394
+ "CVE-2026-20700",
3395
+ "CVE-2026-20805",
3396
+ "CVE-2026-21385",
3397
+ "CVE-2026-21510",
3398
+ "CVE-2026-21513",
3399
+ "CVE-2026-21519",
3400
+ "CVE-2026-21533",
2644
3401
  "CVE-2026-22252",
2645
3402
  "CVE-2026-22688",
3403
+ "CVE-2026-22769",
2646
3404
  "CVE-2026-24206",
2647
3405
  "CVE-2026-24207",
2648
3406
  "CVE-2026-24213",
2649
3407
  "CVE-2026-24214",
2650
3408
  "CVE-2026-24215",
3409
+ "CVE-2026-2441",
2651
3410
  "CVE-2026-25089",
2652
3411
  "CVE-2026-25592",
2653
3412
  "CVE-2026-26015",
@@ -2658,18 +3417,26 @@
2658
3417
  "CVE-2026-30624",
2659
3418
  "CVE-2026-30625",
2660
3419
  "CVE-2026-31431",
3420
+ "CVE-2026-32201",
3421
+ "CVE-2026-33825",
2661
3422
  "CVE-2026-34159",
3423
+ "CVE-2026-34621",
2662
3424
  "CVE-2026-34926",
3425
+ "CVE-2026-3909",
3426
+ "CVE-2026-3910",
2663
3427
  "CVE-2026-39808",
2664
3428
  "CVE-2026-39884",
2665
3429
  "CVE-2026-40933",
2666
3430
  "CVE-2026-41091",
3431
+ "CVE-2026-43500",
2667
3432
  "CVE-2026-45247",
2668
3433
  "CVE-2026-45321",
2669
3434
  "CVE-2026-45498",
2670
3435
  "CVE-2026-45829",
2671
3436
  "CVE-2026-46300",
2672
3437
  "CVE-2026-46333",
3438
+ "CVE-2026-50522",
3439
+ "CVE-2026-5281",
2673
3440
  "CVE-2026-58644",
2674
3441
  "CVE-2026-9082",
2675
3442
  "MAL-2026-3083"
@@ -2865,13 +3632,19 @@
2865
3632
  "evidence_cves": [
2866
3633
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
2867
3634
  "CVE-2008-4128",
3635
+ "CVE-2010-3904",
2868
3636
  "CVE-2013-0643",
2869
3637
  "CVE-2013-0648",
2870
3638
  "CVE-2014-0497",
2871
3639
  "CVE-2016-20017",
3640
+ "CVE-2016-3427",
3641
+ "CVE-2016-8735",
2872
3642
  "CVE-2017-3506",
3643
+ "CVE-2017-6742",
3644
+ "CVE-2017-7494",
2873
3645
  "CVE-2018-14933",
2874
3646
  "CVE-2019-16278",
3647
+ "CVE-2019-17621",
2875
3648
  "CVE-2021-3129",
2876
3649
  "CVE-2022-0185",
2877
3650
  "CVE-2022-23227",
@@ -3103,8 +3876,10 @@
3103
3876
  "CVE-2023-1671",
3104
3877
  "CVE-2023-20198",
3105
3878
  "CVE-2023-20273",
3879
+ "CVE-2023-21839",
3106
3880
  "CVE-2023-22515",
3107
3881
  "CVE-2023-22527",
3882
+ "CVE-2023-23397",
3108
3883
  "CVE-2023-29552",
3109
3884
  "CVE-2023-33246",
3110
3885
  "CVE-2023-34048",
@@ -3114,6 +3889,7 @@
3114
3889
  "CVE-2023-36846",
3115
3890
  "CVE-2023-36847",
3116
3891
  "CVE-2023-36851",
3892
+ "CVE-2023-38035",
3117
3893
  "CVE-2023-40044",
3118
3894
  "CVE-2023-41179",
3119
3895
  "CVE-2023-41265",
@@ -3286,7 +4062,12 @@
3286
4062
  "status": "open",
3287
4063
  "opened_date": "2026-05-13",
3288
4064
  "evidence_cves": [
4065
+ "CVE-2020-35730",
4066
+ "CVE-2022-27926",
3289
4067
  "CVE-2022-36551",
4068
+ "CVE-2022-39197",
4069
+ "CVE-2023-2868",
4070
+ "CVE-2023-37580",
3290
4071
  "CVE-2023-44467",
3291
4072
  "CVE-2023-6571",
3292
4073
  "CVE-2024-0129",
@@ -3436,8 +4217,10 @@
3436
4217
  "CVE-2012-4792",
3437
4218
  "CVE-2013-0643",
3438
4219
  "CVE-2013-0648",
4220
+ "CVE-2013-3163",
3439
4221
  "CVE-2013-3893",
3440
4222
  "CVE-2013-3918",
4223
+ "CVE-2014-0196",
3441
4224
  "CVE-2014-0497",
3442
4225
  "CVE-2014-0502",
3443
4226
  "CVE-2014-100005",
@@ -3447,10 +4230,13 @@
3447
4230
  "CVE-2014-8361",
3448
4231
  "CVE-2015-7755",
3449
4232
  "CVE-2016-10033",
4233
+ "CVE-2016-6415",
3450
4234
  "CVE-2016-7836",
4235
+ "CVE-2016-9079",
3451
4236
  "CVE-2017-1000253",
3452
4237
  "CVE-2017-1000353",
3453
4238
  "CVE-2017-12637",
4239
+ "CVE-2017-18368",
3454
4240
  "CVE-2017-3066",
3455
4241
  "CVE-2017-6884",
3456
4242
  "CVE-2017-7921",
@@ -3464,6 +4250,7 @@
3464
4250
  "CVE-2019-0344",
3465
4251
  "CVE-2019-11001",
3466
4252
  "CVE-2019-19006",
4253
+ "CVE-2019-20500",
3467
4254
  "CVE-2019-5418",
3468
4255
  "CVE-2019-6693",
3469
4256
  "CVE-2019-7256",
@@ -3472,6 +4259,7 @@
3472
4259
  "CVE-2019-9875",
3473
4260
  "CVE-2020-0618",
3474
4261
  "CVE-2020-11023",
4262
+ "CVE-2020-12641",
3475
4263
  "CVE-2020-13965",
3476
4264
  "CVE-2020-14644",
3477
4265
  "CVE-2020-15415",
@@ -3494,10 +4282,16 @@
3494
4282
  "CVE-2021-22175",
3495
4283
  "CVE-2021-22555",
3496
4284
  "CVE-2021-22681",
4285
+ "CVE-2021-25371",
4286
+ "CVE-2021-25372",
4287
+ "CVE-2021-25487",
4288
+ "CVE-2021-25489",
3497
4289
  "CVE-2021-26086",
3498
4290
  "CVE-2021-26828",
3499
4291
  "CVE-2021-26829",
3500
4292
  "CVE-2021-27137",
4293
+ "CVE-2021-27876",
4294
+ "CVE-2021-30900",
3501
4295
  "CVE-2021-30952",
3502
4296
  "CVE-2021-31196",
3503
4297
  "CVE-2021-3129",
@@ -3506,13 +4300,16 @@
3506
4300
  "CVE-2021-33515",
3507
4301
  "CVE-2021-36380",
3508
4302
  "CVE-2021-38371",
4303
+ "CVE-2021-39144",
3509
4304
  "CVE-2021-39935",
3510
4305
  "CVE-2021-40407",
3511
4306
  "CVE-2021-41277",
3512
4307
  "CVE-2021-43226",
3513
4308
  "CVE-2021-43798",
4309
+ "CVE-2021-44026",
3514
4310
  "CVE-2021-44207",
3515
4311
  "CVE-2021-44529",
4312
+ "CVE-2021-45046",
3516
4313
  "CVE-2022-0185",
3517
4314
  "CVE-2022-0492",
3518
4315
  "CVE-2022-1471",
@@ -3520,44 +4317,88 @@
3520
4317
  "CVE-2022-21445",
3521
4318
  "CVE-2022-22071",
3522
4319
  "CVE-2022-22265",
4320
+ "CVE-2022-22706",
3523
4321
  "CVE-2022-22948",
3524
4322
  "CVE-2022-23748",
3525
4323
  "CVE-2022-24816",
3526
4324
  "CVE-2022-2586",
4325
+ "CVE-2022-29303",
4326
+ "CVE-2022-3038",
4327
+ "CVE-2022-31199",
3527
4328
  "CVE-2022-37055",
3528
4329
  "CVE-2022-38028",
4330
+ "CVE-2022-38181",
3529
4331
  "CVE-2022-40799",
4332
+ "CVE-2022-41328",
4333
+ "CVE-2022-42948",
3530
4334
  "CVE-2022-43769",
3531
4335
  "CVE-2022-43939",
3532
4336
  "CVE-2022-48503",
3533
4337
  "CVE-2022-48618",
3534
4338
  "CVE-2023-0386",
4339
+ "CVE-2023-1389",
3535
4340
  "CVE-2023-1671",
3536
4341
  "CVE-2023-20109",
3537
4342
  "CVE-2023-20118",
4343
+ "CVE-2023-2033",
4344
+ "CVE-2023-20887",
4345
+ "CVE-2023-20963",
3538
4346
  "CVE-2023-21237",
4347
+ "CVE-2023-2136",
4348
+ "CVE-2023-21492",
3539
4349
  "CVE-2023-21529",
3540
4350
  "CVE-2023-21608",
3541
4351
  "CVE-2023-22515",
3542
4352
  "CVE-2023-22518",
3543
4353
  "CVE-2023-22527",
4354
+ "CVE-2023-24489",
3544
4355
  "CVE-2023-24955",
3545
4356
  "CVE-2023-25280",
3546
4357
  "CVE-2023-2533",
4358
+ "CVE-2023-25717",
4359
+ "CVE-2023-26083",
4360
+ "CVE-2023-26359",
4361
+ "CVE-2023-26360",
3547
4362
  "CVE-2023-26369",
4363
+ "CVE-2023-27350",
3548
4364
  "CVE-2023-27351",
4365
+ "CVE-2023-27992",
4366
+ "CVE-2023-27997",
4367
+ "CVE-2023-28204",
4368
+ "CVE-2023-28205",
4369
+ "CVE-2023-28206",
3549
4370
  "CVE-2023-28229",
4371
+ "CVE-2023-28252",
4372
+ "CVE-2023-28432",
3550
4373
  "CVE-2023-28461",
4374
+ "CVE-2023-28771",
4375
+ "CVE-2023-29298",
3551
4376
  "CVE-2023-29300",
4377
+ "CVE-2023-29336",
3552
4378
  "CVE-2023-29360",
4379
+ "CVE-2023-29492",
4380
+ "CVE-2023-3079",
4381
+ "CVE-2023-32046",
4382
+ "CVE-2023-32315",
4383
+ "CVE-2023-32373",
4384
+ "CVE-2023-32409",
4385
+ "CVE-2023-32434",
4386
+ "CVE-2023-32435",
4387
+ "CVE-2023-32439",
4388
+ "CVE-2023-33009",
4389
+ "CVE-2023-33010",
3553
4390
  "CVE-2023-33063",
3554
4391
  "CVE-2023-33106",
3555
4392
  "CVE-2023-33107",
3556
4393
  "CVE-2023-33538",
3557
4394
  "CVE-2023-34048",
3558
4395
  "CVE-2023-34192",
4396
+ "CVE-2023-34362",
4397
+ "CVE-2023-35078",
4398
+ "CVE-2023-35081",
3559
4399
  "CVE-2023-35082",
3560
4400
  "CVE-2023-3519",
4401
+ "CVE-2023-35311",
3561
4402
  "CVE-2023-35674",
3562
4403
  "CVE-2023-36025",
3563
4404
  "CVE-2023-36033",
@@ -3571,7 +4412,12 @@
3571
4412
  "CVE-2023-36846",
3572
4413
  "CVE-2023-36847",
3573
4414
  "CVE-2023-36851",
4415
+ "CVE-2023-36884",
4416
+ "CVE-2023-37450",
4417
+ "CVE-2023-38180",
3574
4418
  "CVE-2023-38203",
4419
+ "CVE-2023-38205",
4420
+ "CVE-2023-38606",
3575
4421
  "CVE-2023-38831",
3576
4422
  "CVE-2023-38950",
3577
4423
  "CVE-2023-39780",
@@ -3967,6 +4813,7 @@
3967
4813
  "CVE-2025-68461",
3968
4814
  "CVE-2025-68613",
3969
4815
  "CVE-2025-68645",
4816
+ "CVE-2025-68686",
3970
4817
  "CVE-2025-7775",
3971
4818
  "CVE-2025-8088",
3972
4819
  "CVE-2025-8110",
@@ -3986,6 +4833,7 @@
3986
4833
  "CVE-2026-15409",
3987
4834
  "CVE-2026-15410",
3988
4835
  "CVE-2026-1603",
4836
+ "CVE-2026-16812",
3989
4837
  "CVE-2026-1731",
3990
4838
  "CVE-2026-20045",
3991
4839
  "CVE-2026-20122",
@@ -4075,6 +4923,7 @@
4075
4923
  "CVE-2026-48907",
4076
4924
  "CVE-2026-48908",
4077
4925
  "CVE-2026-48939",
4926
+ "CVE-2026-50522",
4078
4927
  "CVE-2026-50751",
4079
4928
  "CVE-2026-5281",
4080
4929
  "CVE-2026-54420",
@@ -4122,6 +4971,8 @@
4122
4971
  "CVE-2018-0824",
4123
4972
  "CVE-2020-13965",
4124
4973
  "CVE-2023-21608",
4974
+ "CVE-2023-24880",
4975
+ "CVE-2023-32049",
4125
4976
  "CVE-2023-36025",
4126
4977
  "CVE-2023-38831",
4127
4978
  "CVE-2023-5217",
@@ -5198,58 +6049,138 @@
5198
6049
  "status": "open",
5199
6050
  "opened_date": "2026-05-13",
5200
6051
  "evidence_cves": [
6052
+ "CVE-2015-7755",
6053
+ "CVE-2016-7836",
6054
+ "CVE-2017-7921",
5201
6055
  "CVE-2018-19410",
5202
6056
  "CVE-2018-9276",
6057
+ "CVE-2019-19006",
6058
+ "CVE-2019-6693",
6059
+ "CVE-2020-24363",
5203
6060
  "CVE-2020-2883",
5204
6061
  "CVE-2020-3259",
6062
+ "CVE-2021-20124",
6063
+ "CVE-2021-22681",
6064
+ "CVE-2021-27876",
6065
+ "CVE-2021-27877",
6066
+ "CVE-2021-27878",
6067
+ "CVE-2021-32030",
6068
+ "CVE-2021-33044",
5205
6069
  "CVE-2021-33045",
5206
6070
  "CVE-2022-1471",
6071
+ "CVE-2022-22948",
6072
+ "CVE-2022-23227",
5207
6073
  "CVE-2023-20198",
5208
6074
  "CVE-2023-20269",
6075
+ "CVE-2023-20867",
5209
6076
  "CVE-2023-22515",
5210
6077
  "CVE-2023-22518",
6078
+ "CVE-2023-23397",
5211
6079
  "CVE-2023-23752",
6080
+ "CVE-2023-24955",
6081
+ "CVE-2023-27350",
6082
+ "CVE-2023-27351",
5212
6083
  "CVE-2023-27524",
6084
+ "CVE-2023-27532",
6085
+ "CVE-2023-28432",
5213
6086
  "CVE-2023-28434",
5214
6087
  "CVE-2023-29357",
6088
+ "CVE-2023-35078",
5215
6089
  "CVE-2023-35082",
5216
6090
  "CVE-2023-36563",
5217
6091
  "CVE-2023-36761",
5218
6092
  "CVE-2023-36846",
6093
+ "CVE-2023-38035",
5219
6094
  "CVE-2023-42793",
5220
6095
  "CVE-2023-43654",
5221
6096
  "CVE-2023-43791",
6097
+ "CVE-2023-45249",
5222
6098
  "CVE-2023-46747",
5223
6099
  "CVE-2023-46748",
5224
6100
  "CVE-2023-47117",
5225
6101
  "CVE-2023-48022",
5226
6102
  "CVE-2023-4966",
6103
+ "CVE-2023-50224",
6104
+ "CVE-2023-52163",
5227
6105
  "CVE-2023-6019",
5228
6106
  "CVE-2023-6021",
5229
6107
  "CVE-2023-6448",
5230
6108
  "CVE-2023-6548",
6109
+ "CVE-2023-7028",
5231
6110
  "CVE-2024-0012",
5232
6111
  "CVE-2024-12776",
6112
+ "CVE-2024-1709",
6113
+ "CVE-2024-20399",
5233
6114
  "CVE-2024-21410",
6115
+ "CVE-2024-28986",
6116
+ "CVE-2024-28987",
5234
6117
  "CVE-2024-28995",
6118
+ "CVE-2024-3272",
5235
6119
  "CVE-2024-4358",
5236
6120
  "CVE-2024-45195",
5237
6121
  "CVE-2024-4889",
5238
6122
  "CVE-2024-49138",
6123
+ "CVE-2024-54085",
6124
+ "CVE-2024-57726",
5239
6125
  "CVE-2024-57727",
5240
6126
  "CVE-2024-6587",
5241
6127
  "CVE-2024-7593",
5242
6128
  "CVE-2024-8956",
6129
+ "CVE-2024-9463",
6130
+ "CVE-2024-9465",
6131
+ "CVE-2025-10725",
6132
+ "CVE-2025-12480",
5243
6133
  "CVE-2025-1796",
6134
+ "CVE-2025-20281",
6135
+ "CVE-2025-20337",
6136
+ "CVE-2025-20362",
6137
+ "CVE-2025-21085",
6138
+ "CVE-2025-2746",
6139
+ "CVE-2025-2747",
6140
+ "CVE-2025-32433",
6141
+ "CVE-2025-32975",
6142
+ "CVE-2025-34026",
6143
+ "CVE-2025-3935",
6144
+ "CVE-2025-40536",
6145
+ "CVE-2025-40602",
6146
+ "CVE-2025-4427",
6147
+ "CVE-2025-48700",
6148
+ "CVE-2025-48928",
6149
+ "CVE-2025-49113",
6150
+ "CVE-2025-49706",
6151
+ "CVE-2025-53767",
6152
+ "CVE-2025-54236",
6153
+ "CVE-2025-54309",
6154
+ "CVE-2025-55241",
6155
+ "CVE-2025-5777",
6156
+ "CVE-2025-57819",
6157
+ "CVE-2025-59718",
6158
+ "CVE-2025-61757",
5244
6159
  "CVE-2025-64513",
5245
6160
  "CVE-2025-69286",
5246
6161
  "CVE-2026-0257",
6162
+ "CVE-2026-1603",
6163
+ "CVE-2026-16232",
6164
+ "CVE-2026-1731",
6165
+ "CVE-2026-20127",
6166
+ "CVE-2026-20128",
6167
+ "CVE-2026-20182",
5247
6168
  "CVE-2026-20245",
6169
+ "CVE-2026-21533",
6170
+ "CVE-2026-22769",
6171
+ "CVE-2026-23760",
5248
6172
  "CVE-2026-24206",
5249
6173
  "CVE-2026-24207",
6174
+ "CVE-2026-24858",
5250
6175
  "CVE-2026-26190",
6176
+ "CVE-2026-3055",
6177
+ "CVE-2026-33634",
6178
+ "CVE-2026-39987",
6179
+ "CVE-2026-41940",
5251
6180
  "CVE-2026-41947",
5252
6181
  "CVE-2026-41950",
6182
+ "CVE-2026-42208",
6183
+ "CVE-2026-46817",
5253
6184
  "CVE-2026-50751",
5254
6185
  "CVE-2026-55255",
5255
6186
  "CVE-2026-56155",
@@ -5289,23 +6220,39 @@
5289
6220
  "status": "open",
5290
6221
  "opened_date": "2026-05-13",
5291
6222
  "evidence_cves": [
6223
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
5292
6224
  "CVE-2014-2120",
6225
+ "CVE-2018-14933",
6226
+ "CVE-2020-10148",
5293
6227
  "CVE-2020-13965",
5294
6228
  "CVE-2023-29360",
5295
6229
  "CVE-2023-34048",
5296
6230
  "CVE-2023-36025",
5297
6231
  "CVE-2023-41265",
5298
6232
  "CVE-2023-41266",
6233
+ "CVE-2023-48788",
6234
+ "CVE-2023-51766",
5299
6235
  "CVE-2023-5631",
6236
+ "CVE-2024-20359",
5300
6237
  "CVE-2024-21351",
5301
6238
  "CVE-2024-21412",
5302
6239
  "CVE-2024-21887",
5303
6240
  "CVE-2024-23897",
5304
6241
  "CVE-2024-24919",
5305
6242
  "CVE-2024-38094",
6243
+ "CVE-2024-38193",
6244
+ "CVE-2024-38213",
5306
6245
  "CVE-2024-41710",
6246
+ "CVE-2024-43461",
5307
6247
  "CVE-2024-49039",
5308
- "CVE-2025-0994"
6248
+ "CVE-2024-4947",
6249
+ "CVE-2024-55956",
6250
+ "CVE-2024-57728",
6251
+ "CVE-2024-6670",
6252
+ "CVE-2025-0994",
6253
+ "CVE-2025-24016",
6254
+ "CVE-2025-27915",
6255
+ "CVE-2026-32202"
5309
6256
  ],
5310
6257
  "atlas_refs": [
5311
6258
  "AML.T0096",
@@ -5344,11 +6291,20 @@
5344
6291
  "evidence_cves": [
5345
6292
  "CVE-2023-41061",
5346
6293
  "CVE-2023-41064",
6294
+ "CVE-2023-44487",
6295
+ "CVE-2024-1708",
5347
6296
  "CVE-2024-20481",
5348
6297
  "CVE-2024-3393",
6298
+ "CVE-2024-37085",
6299
+ "CVE-2024-40766",
6300
+ "CVE-2024-4577",
5349
6301
  "CVE-2024-51567",
5350
6302
  "CVE-2025-21391",
5351
- "CVE-2025-21418"
6303
+ "CVE-2025-21418",
6304
+ "CVE-2025-59389",
6305
+ "CVE-2025-61882",
6306
+ "CVE-2025-8671",
6307
+ "CVE-2026-21525"
5352
6308
  ],
5353
6309
  "atlas_refs": [],
5354
6310
  "attack_refs": [
@@ -5553,7 +6509,9 @@
5553
6509
  "real_requirement": "CAF B5 + signaling-anomaly detection + gNB firmware attestation outcome test + slice-isolation outcome test.",
5554
6510
  "status": "open",
5555
6511
  "opened_date": "2026-05-15",
5556
- "evidence_cves": [],
6512
+ "evidence_cves": [
6513
+ "CVE-2023-50387"
6514
+ ],
5557
6515
  "atlas_refs": [],
5558
6516
  "attack_refs": [
5559
6517
  "T1199",
@@ -6456,12 +7414,23 @@
6456
7414
  "status": "open",
6457
7415
  "opened_date": "2026-05-15",
6458
7416
  "evidence_cves": [
7417
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
7418
+ "CVE-2008-0015",
7419
+ "CVE-2009-3459",
7420
+ "CVE-2010-3904",
6459
7421
  "CVE-2012-4792",
6460
7422
  "CVE-2013-0643",
6461
7423
  "CVE-2013-0648",
7424
+ "CVE-2013-3893",
6462
7425
  "CVE-2014-0497",
7426
+ "CVE-2014-0502",
7427
+ "CVE-2014-100005",
7428
+ "CVE-2014-6278",
7429
+ "CVE-2015-5317",
7430
+ "CVE-2016-10033",
6463
7431
  "CVE-2017-12637",
6464
7432
  "CVE-2017-3066",
7433
+ "CVE-2018-14634",
6465
7434
  "CVE-2018-14667",
6466
7435
  "CVE-2018-14933",
6467
7436
  "CVE-2018-15133",
@@ -6470,6 +7439,8 @@
6470
7439
  "CVE-2018-9276",
6471
7440
  "CVE-2019-0344",
6472
7441
  "CVE-2019-11001",
7442
+ "CVE-2019-5418",
7443
+ "CVE-2019-9621",
6473
7444
  "CVE-2019-9874",
6474
7445
  "CVE-2019-9875",
6475
7446
  "CVE-2020-11023",
@@ -6478,21 +7449,33 @@
6478
7449
  "CVE-2020-2551",
6479
7450
  "CVE-2020-29574",
6480
7451
  "CVE-2020-3259",
7452
+ "CVE-2020-7796",
7453
+ "CVE-2021-25371",
7454
+ "CVE-2021-25395",
6481
7455
  "CVE-2021-26086",
7456
+ "CVE-2021-32030",
7457
+ "CVE-2021-3560",
7458
+ "CVE-2021-43798",
6482
7459
  "CVE-2021-44207",
6483
7460
  "CVE-2021-44529",
6484
7461
  "CVE-2022-21445",
6485
7462
  "CVE-2022-22265",
6486
7463
  "CVE-2022-23227",
6487
7464
  "CVE-2022-24816",
7465
+ "CVE-2022-38028",
7466
+ "CVE-2022-39197",
7467
+ "CVE-2022-40799",
6488
7468
  "CVE-2022-43769",
6489
7469
  "CVE-2022-43939",
6490
7470
  "CVE-2023-1671",
6491
7471
  "CVE-2023-20118",
6492
7472
  "CVE-2023-23752",
7473
+ "CVE-2023-2533",
6493
7474
  "CVE-2023-27524",
7475
+ "CVE-2023-28432",
6494
7476
  "CVE-2023-28461",
6495
7477
  "CVE-2023-34192",
7478
+ "CVE-2023-35078",
6496
7479
  "CVE-2023-3519",
6497
7480
  "CVE-2023-41265",
6498
7481
  "CVE-2023-41266",
@@ -6506,6 +7489,7 @@
6506
7489
  "CVE-2023-5217",
6507
7490
  "CVE-2023-6571",
6508
7491
  "CVE-2024-0012",
7492
+ "CVE-2024-0769",
6509
7493
  "CVE-2024-11680",
6510
7494
  "CVE-2024-12366",
6511
7495
  "CVE-2024-12686",
@@ -6524,17 +7508,22 @@
6524
7508
  "CVE-2024-2912",
6525
7509
  "CVE-2024-29824",
6526
7510
  "CVE-2024-32113",
7511
+ "CVE-2024-3272",
6527
7512
  "CVE-2024-34102",
6528
7513
  "CVE-2024-36401",
7514
+ "CVE-2024-38178",
7515
+ "CVE-2024-38189",
6529
7516
  "CVE-2024-38475",
6530
7517
  "CVE-2024-38813",
6531
7518
  "CVE-2024-40890",
6532
7519
  "CVE-2024-40891",
6533
7520
  "CVE-2024-41710",
6534
7521
  "CVE-2024-41713",
7522
+ "CVE-2024-42009",
6535
7523
  "CVE-2024-43047",
6536
7524
  "CVE-2024-43093",
6537
7525
  "CVE-2024-43461",
7526
+ "CVE-2024-43468",
6538
7527
  "CVE-2024-43572",
6539
7528
  "CVE-2024-43573",
6540
7529
  "CVE-2024-44308",
@@ -6552,11 +7541,13 @@
6552
7541
  "CVE-2024-53197",
6553
7542
  "CVE-2024-55550",
6554
7543
  "CVE-2024-5565",
7544
+ "CVE-2024-56145",
6555
7545
  "CVE-2024-57727",
6556
7546
  "CVE-2024-57968",
6557
7547
  "CVE-2024-58136",
6558
7548
  "CVE-2024-6670",
6559
7549
  "CVE-2024-7593",
7550
+ "CVE-2024-7694",
6560
7551
  "CVE-2024-8956",
6561
7552
  "CVE-2024-8957",
6562
7553
  "CVE-2024-9379",
@@ -6565,10 +7556,18 @@
6565
7556
  "CVE-2024-9537",
6566
7557
  "CVE-2025-0111",
6567
7558
  "CVE-2025-0411",
7559
+ "CVE-2025-12480",
7560
+ "CVE-2025-12686",
7561
+ "CVE-2025-14611",
7562
+ "CVE-2025-14847",
7563
+ "CVE-2025-21085",
6568
7564
  "CVE-2025-21333",
6569
7565
  "CVE-2025-21334",
6570
7566
  "CVE-2025-21335",
6571
7567
  "CVE-2025-21418",
7568
+ "CVE-2025-21479",
7569
+ "CVE-2025-21480",
7570
+ "CVE-2025-22226",
6572
7571
  "CVE-2025-23006",
6573
7572
  "CVE-2025-23209",
6574
7573
  "CVE-2025-24054",
@@ -6582,20 +7581,60 @@
6582
7581
  "CVE-2025-24993",
6583
7582
  "CVE-2025-25181",
6584
7583
  "CVE-2025-26633",
7584
+ "CVE-2025-2749",
6585
7585
  "CVE-2025-27520",
7586
+ "CVE-2025-2775",
7587
+ "CVE-2025-2776",
6586
7588
  "CVE-2025-2783",
6587
7589
  "CVE-2025-29824",
6588
7590
  "CVE-2025-30406",
6589
7591
  "CVE-2025-31200",
6590
7592
  "CVE-2025-31201",
7593
+ "CVE-2025-32463",
7594
+ "CVE-2025-32701",
7595
+ "CVE-2025-32975",
6591
7596
  "CVE-2025-34028",
6592
7597
  "CVE-2025-3466",
7598
+ "CVE-2025-35939",
6593
7599
  "CVE-2025-3928",
7600
+ "CVE-2025-40536",
7601
+ "CVE-2025-40551",
6594
7602
  "CVE-2025-42599",
7603
+ "CVE-2025-43529",
7604
+ "CVE-2025-4427",
6595
7605
  "CVE-2025-47729",
7606
+ "CVE-2025-47813",
7607
+ "CVE-2025-47827",
7608
+ "CVE-2025-48384",
7609
+ "CVE-2025-48572",
7610
+ "CVE-2025-48703",
7611
+ "CVE-2025-48928",
7612
+ "CVE-2025-49113",
7613
+ "CVE-2025-53773",
7614
+ "CVE-2025-54068",
7615
+ "CVE-2025-54253",
7616
+ "CVE-2025-59230",
7617
+ "CVE-2025-59374",
7618
+ "CVE-2025-6204",
7619
+ "CVE-2025-62847",
7620
+ "CVE-2025-62849",
7621
+ "CVE-2025-6558",
7622
+ "CVE-2025-68461",
7623
+ "CVE-2025-68613",
7624
+ "CVE-2025-8088",
7625
+ "CVE-2025-8110",
7626
+ "CVE-2025-8875",
6596
7627
  "CVE-2026-0300",
6597
7628
  "CVE-2026-12569",
6598
7629
  "CVE-2026-20253",
7630
+ "CVE-2026-20963",
7631
+ "CVE-2026-21509",
7632
+ "CVE-2026-21514",
7633
+ "CVE-2026-21643",
7634
+ "CVE-2026-22719",
7635
+ "CVE-2026-3055",
7636
+ "CVE-2026-33634",
7637
+ "CVE-2026-34197",
6599
7638
  "CVE-2026-42945",
6600
7639
  "CVE-2026-45659",
6601
7640
  "CVE-2026-46817",
@@ -6818,6 +7857,7 @@
6818
7857
  "opened_date": "2026-05-15",
6819
7858
  "evidence_cves": [
6820
7859
  "CVE-2014-100005",
7860
+ "CVE-2015-5317",
6821
7861
  "CVE-2020-29574",
6822
7862
  "CVE-2021-40655",
6823
7863
  "CVE-2021-41277",
@@ -6968,6 +8008,7 @@
6968
8008
  "CVE-2013-3918",
6969
8009
  "CVE-2014-6278",
6970
8010
  "CVE-2015-7755",
8011
+ "CVE-2016-0165",
6971
8012
  "CVE-2016-10033",
6972
8013
  "CVE-2016-7836",
6973
8014
  "CVE-2017-1000353",
@@ -6975,14 +8016,20 @@
6975
8016
  "CVE-2018-4063",
6976
8017
  "CVE-2018-9276",
6977
8018
  "CVE-2019-11001",
8019
+ "CVE-2019-1388",
6978
8020
  "CVE-2019-19006",
6979
8021
  "CVE-2019-6693",
8022
+ "CVE-2019-8526",
6980
8023
  "CVE-2020-24363",
6981
8024
  "CVE-2020-25078",
6982
8025
  "CVE-2020-25079",
6983
8026
  "CVE-2021-22681",
8027
+ "CVE-2021-25394",
8028
+ "CVE-2021-25395",
6984
8029
  "CVE-2021-26828",
8030
+ "CVE-2021-29256",
6985
8031
  "CVE-2021-32030",
8032
+ "CVE-2021-3560",
6986
8033
  "CVE-2021-40407",
6987
8034
  "CVE-2022-0492",
6988
8035
  "CVE-2022-22948",
@@ -6990,6 +8037,7 @@
6990
8037
  "CVE-2022-38028",
6991
8038
  "CVE-2022-40799",
6992
8039
  "CVE-2022-48503",
8040
+ "CVE-2023-0266",
6993
8041
  "CVE-2023-0386",
6994
8042
  "CVE-2023-20109",
6995
8043
  "CVE-2023-21529",
@@ -7003,6 +8051,7 @@
7003
8051
  "CVE-2023-36033",
7004
8052
  "CVE-2023-36036",
7005
8053
  "CVE-2023-36802",
8054
+ "CVE-2023-36874",
7006
8055
  "CVE-2023-39780",
7007
8056
  "CVE-2023-41265",
7008
8057
  "CVE-2023-4211",
@@ -7229,6 +8278,9 @@
7229
8278
  "status": "open",
7230
8279
  "opened_date": "2026-05-15",
7231
8280
  "evidence_cves": [
8281
+ "CVE-2023-20867",
8282
+ "CVE-2023-27532",
8283
+ "CVE-2023-38035",
7232
8284
  "CVE-2023-43791",
7233
8285
  "CVE-2023-47117",
7234
8286
  "CVE-2023-6016",
@@ -7237,6 +8289,7 @@
7237
8289
  "CVE-2025-1796",
7238
8290
  "CVE-2025-3248",
7239
8291
  "CVE-2025-69286",
8292
+ "CVE-2026-16232",
7240
8293
  "CVE-2026-33017",
7241
8294
  "CVE-2026-35273",
7242
8295
  "CVE-2026-41947",
@@ -7276,26 +8329,34 @@
7276
8329
  "opened_date": "2026-05-15",
7277
8330
  "evidence_cves": [
7278
8331
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
8332
+ "CVE-2023-24880",
8333
+ "CVE-2023-32049",
7279
8334
  "CVE-2023-36025",
7280
8335
  "CVE-2023-36584",
7281
8336
  "CVE-2024-21351",
7282
8337
  "CVE-2024-21412",
8338
+ "CVE-2024-26169",
7283
8339
  "CVE-2024-29988",
7284
8340
  "CVE-2024-30040",
7285
8341
  "CVE-2024-38213",
7286
8342
  "CVE-2024-38217",
7287
8343
  "CVE-2024-38226",
7288
8344
  "CVE-2024-43461",
8345
+ "CVE-2024-45519",
7289
8346
  "CVE-2024-4978",
7290
8347
  "CVE-2024-53104",
7291
8348
  "CVE-2024-7262",
8349
+ "CVE-2024-9680",
8350
+ "CVE-2025-0411",
7292
8351
  "CVE-2025-11837",
7293
8352
  "CVE-2025-30400",
7294
8353
  "CVE-2026-11645",
7295
8354
  "CVE-2026-32202",
7296
8355
  "CVE-2026-33825",
7297
8356
  "CVE-2026-56290",
7298
- "CVE-2026-6973"
8357
+ "CVE-2026-6973",
8358
+ "MAL-2026-NODE-IPC-STEALER",
8359
+ "MAL-2026-TANSTACK-MINI"
7299
8360
  ],
7300
8361
  "atlas_refs": [],
7301
8362
  "attack_refs": [
@@ -7417,82 +8478,239 @@
7417
8478
  "status": "open",
7418
8479
  "opened_date": "2026-05-17",
7419
8480
  "evidence_cves": [
8481
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
8482
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
8483
+ "CVE-2004-1464",
8484
+ "CVE-2007-0671",
8485
+ "CVE-2008-0015",
8486
+ "CVE-2008-4128",
8487
+ "CVE-2008-4250",
8488
+ "CVE-2009-0238",
8489
+ "CVE-2009-0556",
8490
+ "CVE-2009-1537",
8491
+ "CVE-2009-3459",
8492
+ "CVE-2010-0249",
8493
+ "CVE-2010-0806",
8494
+ "CVE-2010-3765",
8495
+ "CVE-2010-3904",
8496
+ "CVE-2010-3962",
7420
8497
  "CVE-2011-0411",
8498
+ "CVE-2011-3402",
8499
+ "CVE-2012-1854",
8500
+ "CVE-2012-4792",
7421
8501
  "CVE-2013-0643",
8502
+ "CVE-2013-0648",
8503
+ "CVE-2013-3163",
8504
+ "CVE-2013-3893",
8505
+ "CVE-2013-3918",
8506
+ "CVE-2014-0196",
8507
+ "CVE-2014-0497",
7422
8508
  "CVE-2014-0502",
8509
+ "CVE-2014-100005",
8510
+ "CVE-2014-3931",
8511
+ "CVE-2014-6278",
7423
8512
  "CVE-2014-8361",
8513
+ "CVE-2015-5317",
8514
+ "CVE-2016-0165",
8515
+ "CVE-2016-10033",
7424
8516
  "CVE-2016-20017",
8517
+ "CVE-2016-3427",
7425
8518
  "CVE-2016-3714",
8519
+ "CVE-2016-6415",
8520
+ "CVE-2016-8735",
8521
+ "CVE-2016-9079",
7426
8522
  "CVE-2017-1000253",
8523
+ "CVE-2017-1000353",
7427
8524
  "CVE-2017-12637",
8525
+ "CVE-2017-18368",
7428
8526
  "CVE-2017-3066",
7429
8527
  "CVE-2017-3506",
8528
+ "CVE-2017-6742",
7430
8529
  "CVE-2017-6884",
8530
+ "CVE-2017-7494",
8531
+ "CVE-2018-0824",
8532
+ "CVE-2018-14634",
7431
8533
  "CVE-2018-14667",
7432
8534
  "CVE-2018-15133",
8535
+ "CVE-2018-4063",
7433
8536
  "CVE-2018-8639",
7434
8537
  "CVE-2019-0344",
8538
+ "CVE-2019-11001",
8539
+ "CVE-2019-1388",
7435
8540
  "CVE-2019-16278",
8541
+ "CVE-2019-17621",
8542
+ "CVE-2019-20500",
8543
+ "CVE-2019-5418",
8544
+ "CVE-2019-7256",
8545
+ "CVE-2019-8526",
8546
+ "CVE-2019-9621",
7436
8547
  "CVE-2019-9874",
7437
8548
  "CVE-2019-9875",
8549
+ "CVE-2020-0618",
7438
8550
  "CVE-2020-11023",
8551
+ "CVE-2020-12641",
8552
+ "CVE-2020-14644",
7439
8553
  "CVE-2020-15069",
7440
8554
  "CVE-2020-15415",
8555
+ "CVE-2020-17103-REREGRESSION-2026",
7441
8556
  "CVE-2020-17519",
8557
+ "CVE-2020-25078",
8558
+ "CVE-2020-25079",
7442
8559
  "CVE-2020-2551",
7443
8560
  "CVE-2020-29574",
8561
+ "CVE-2020-35730",
8562
+ "CVE-2020-7796",
8563
+ "CVE-2020-9715",
7444
8564
  "CVE-2021-20035",
8565
+ "CVE-2021-20123",
8566
+ "CVE-2021-21311",
8567
+ "CVE-2021-22054",
8568
+ "CVE-2021-22175",
8569
+ "CVE-2021-22555",
8570
+ "CVE-2021-25371",
8571
+ "CVE-2021-25372",
8572
+ "CVE-2021-25394",
8573
+ "CVE-2021-25395",
8574
+ "CVE-2021-25487",
8575
+ "CVE-2021-25489",
7445
8576
  "CVE-2021-26086",
8577
+ "CVE-2021-26828",
8578
+ "CVE-2021-26829",
7446
8579
  "CVE-2021-27137",
8580
+ "CVE-2021-29256",
8581
+ "CVE-2021-30900",
8582
+ "CVE-2021-30952",
8583
+ "CVE-2021-31196",
7447
8584
  "CVE-2021-3129",
7448
8585
  "CVE-2021-33515",
8586
+ "CVE-2021-3560",
7449
8587
  "CVE-2021-36380",
7450
8588
  "CVE-2021-38371",
8589
+ "CVE-2021-39144",
8590
+ "CVE-2021-39935",
8591
+ "CVE-2021-40407",
8592
+ "CVE-2021-40655",
8593
+ "CVE-2021-41277",
8594
+ "CVE-2021-43226",
8595
+ "CVE-2021-43798",
8596
+ "CVE-2021-44026",
7451
8597
  "CVE-2021-44207",
7452
8598
  "CVE-2021-44529",
8599
+ "CVE-2021-45046",
8600
+ "CVE-2022-0185",
7453
8601
  "CVE-2022-0492",
8602
+ "CVE-2022-20775",
7454
8603
  "CVE-2022-21445",
7455
8604
  "CVE-2022-22071",
7456
8605
  "CVE-2022-22265",
8606
+ "CVE-2022-22706",
7457
8607
  "CVE-2022-23748",
7458
8608
  "CVE-2022-23812",
8609
+ "CVE-2022-24816",
8610
+ "CVE-2022-2586",
8611
+ "CVE-2022-27926",
8612
+ "CVE-2022-29303",
8613
+ "CVE-2022-3038",
8614
+ "CVE-2022-31199",
7459
8615
  "CVE-2022-36551",
8616
+ "CVE-2022-37055",
7460
8617
  "CVE-2022-38028",
8618
+ "CVE-2022-38181",
8619
+ "CVE-2022-39197",
8620
+ "CVE-2022-40799",
8621
+ "CVE-2022-41328",
8622
+ "CVE-2022-42948",
7461
8623
  "CVE-2022-43769",
7462
8624
  "CVE-2022-43939",
8625
+ "CVE-2022-48503",
7463
8626
  "CVE-2022-48618",
8627
+ "CVE-2023-0266",
8628
+ "CVE-2023-0386",
8629
+ "CVE-2023-1389",
7464
8630
  "CVE-2023-1671",
7465
8631
  "CVE-2023-20109",
7466
8632
  "CVE-2023-20118",
7467
8633
  "CVE-2023-20273",
8634
+ "CVE-2023-2033",
8635
+ "CVE-2023-20887",
8636
+ "CVE-2023-20963",
7468
8637
  "CVE-2023-21237",
8638
+ "CVE-2023-2136",
8639
+ "CVE-2023-21492",
8640
+ "CVE-2023-21529",
7469
8641
  "CVE-2023-21608",
8642
+ "CVE-2023-21839",
7470
8643
  "CVE-2023-22527",
8644
+ "CVE-2023-24489",
8645
+ "CVE-2023-24880",
7471
8646
  "CVE-2023-25280",
8647
+ "CVE-2023-2533",
8648
+ "CVE-2023-25717",
8649
+ "CVE-2023-26083",
8650
+ "CVE-2023-26359",
8651
+ "CVE-2023-26360",
7472
8652
  "CVE-2023-26369",
8653
+ "CVE-2023-27992",
8654
+ "CVE-2023-27997",
8655
+ "CVE-2023-28204",
8656
+ "CVE-2023-28205",
8657
+ "CVE-2023-28206",
7473
8658
  "CVE-2023-28229",
8659
+ "CVE-2023-28252",
7474
8660
  "CVE-2023-28461",
8661
+ "CVE-2023-2868",
8662
+ "CVE-2023-28771",
8663
+ "CVE-2023-29298",
7475
8664
  "CVE-2023-29300",
8665
+ "CVE-2023-29336",
8666
+ "CVE-2023-29492",
7476
8667
  "CVE-2023-29552",
8668
+ "CVE-2023-3079",
8669
+ "CVE-2023-32046",
8670
+ "CVE-2023-32049",
8671
+ "CVE-2023-32315",
8672
+ "CVE-2023-32373",
8673
+ "CVE-2023-32409",
8674
+ "CVE-2023-32434",
8675
+ "CVE-2023-32435",
8676
+ "CVE-2023-32439",
8677
+ "CVE-2023-33009",
8678
+ "CVE-2023-33010",
7477
8679
  "CVE-2023-33063",
7478
8680
  "CVE-2023-33106",
7479
8681
  "CVE-2023-33107",
7480
8682
  "CVE-2023-33246",
8683
+ "CVE-2023-33538",
7481
8684
  "CVE-2023-34192",
8685
+ "CVE-2023-34362",
8686
+ "CVE-2023-35081",
8687
+ "CVE-2023-3519",
8688
+ "CVE-2023-35311",
7482
8689
  "CVE-2023-35674",
7483
8690
  "CVE-2023-36033",
7484
8691
  "CVE-2023-36036",
8692
+ "CVE-2023-36424",
7485
8693
  "CVE-2023-36584",
7486
8694
  "CVE-2023-36802",
7487
8695
  "CVE-2023-36844",
7488
8696
  "CVE-2023-36845",
7489
8697
  "CVE-2023-36847",
7490
8698
  "CVE-2023-36851",
8699
+ "CVE-2023-36874",
8700
+ "CVE-2023-36884",
8701
+ "CVE-2023-37450",
8702
+ "CVE-2023-37580",
8703
+ "CVE-2023-38180",
7491
8704
  "CVE-2023-38203",
8705
+ "CVE-2023-38205",
8706
+ "CVE-2023-38606",
7492
8707
  "CVE-2023-38831",
8708
+ "CVE-2023-38950",
8709
+ "CVE-2023-39780",
7493
8710
  "CVE-2023-40044",
7494
8711
  "CVE-2023-41179",
7495
8712
  "CVE-2023-41763",
8713
+ "CVE-2023-41974",
7496
8714
  "CVE-2023-41990",
7497
8715
  "CVE-2023-41991",
7498
8716
  "CVE-2023-41992",
@@ -7501,7 +8719,10 @@
7501
8719
  "CVE-2023-42824",
7502
8720
  "CVE-2023-42916",
7503
8721
  "CVE-2023-42917",
8722
+ "CVE-2023-43000",
8723
+ "CVE-2023-43208",
7504
8724
  "CVE-2023-4346",
8725
+ "CVE-2023-43472",
7505
8726
  "CVE-2023-43770",
7506
8727
  "CVE-2023-43791",
7507
8728
  "CVE-2023-44221",
@@ -7518,7 +8739,10 @@
7518
8739
  "CVE-2023-49103",
7519
8740
  "CVE-2023-4911",
7520
8741
  "CVE-2023-49897",
8742
+ "CVE-2023-50868",
7521
8743
  "CVE-2023-51449",
8744
+ "CVE-2023-51764",
8745
+ "CVE-2023-51765",
7522
8746
  "CVE-2023-5217",
7523
8747
  "CVE-2023-6016",
7524
8748
  "CVE-2023-6038",
@@ -7530,7 +8754,10 @@
7530
8754
  "CVE-2024-0129",
7531
8755
  "CVE-2024-0132",
7532
8756
  "CVE-2024-0519",
8757
+ "CVE-2024-0769",
8758
+ "CVE-2024-1086",
7533
8759
  "CVE-2024-11120",
8760
+ "CVE-2024-11182",
7534
8761
  "CVE-2024-11392",
7535
8762
  "CVE-2024-11393",
7536
8763
  "CVE-2024-11394",
@@ -7541,11 +8768,13 @@
7541
8768
  "CVE-2024-12366",
7542
8769
  "CVE-2024-12450",
7543
8770
  "CVE-2024-12686",
8771
+ "CVE-2024-12987",
7544
8772
  "CVE-2024-13059",
7545
8773
  "CVE-2024-13159",
7546
8774
  "CVE-2024-13160",
7547
8775
  "CVE-2024-13161",
7548
8776
  "CVE-2024-1561",
8777
+ "CVE-2024-20353",
7549
8778
  "CVE-2024-20439",
7550
8779
  "CVE-2024-20767",
7551
8780
  "CVE-2024-20953",
@@ -7556,33 +8785,51 @@
7556
8785
  "CVE-2024-21513",
7557
8786
  "CVE-2024-21575",
7558
8787
  "CVE-2024-21576",
8788
+ "CVE-2024-21626",
7559
8789
  "CVE-2024-21762",
7560
8790
  "CVE-2024-21893",
7561
8791
  "CVE-2024-23113",
7562
8792
  "CVE-2024-23222",
7563
8793
  "CVE-2024-23225",
7564
8794
  "CVE-2024-23296",
8795
+ "CVE-2024-23692",
7565
8796
  "CVE-2024-24590",
7566
8797
  "CVE-2024-24591",
8798
+ "CVE-2024-26169",
7567
8799
  "CVE-2024-27132",
7568
8800
  "CVE-2024-27198",
8801
+ "CVE-2024-27199",
7569
8802
  "CVE-2024-27348",
8803
+ "CVE-2024-27443",
7570
8804
  "CVE-2024-29059",
7571
8805
  "CVE-2024-2912",
8806
+ "CVE-2024-29745",
7572
8807
  "CVE-2024-29748",
7573
8808
  "CVE-2024-29824",
7574
8809
  "CVE-2024-29988",
8810
+ "CVE-2024-30040",
8811
+ "CVE-2024-30051",
7575
8812
  "CVE-2024-30088",
8813
+ "CVE-2024-3094",
7576
8814
  "CVE-2024-31462",
8815
+ "CVE-2024-3154",
7577
8816
  "CVE-2024-32113",
8817
+ "CVE-2024-3273",
7578
8818
  "CVE-2024-32896",
7579
8819
  "CVE-2024-3400",
8820
+ "CVE-2024-34102",
8821
+ "CVE-2024-35250",
7580
8822
  "CVE-2024-36401",
8823
+ "CVE-2024-36971",
7581
8824
  "CVE-2024-37032",
7582
8825
  "CVE-2024-37052",
7583
8826
  "CVE-2024-37060",
8827
+ "CVE-2024-37079",
7584
8828
  "CVE-2024-37383",
8829
+ "CVE-2024-38014",
8830
+ "CVE-2024-38080",
7585
8831
  "CVE-2024-38106",
8832
+ "CVE-2024-38107",
7586
8833
  "CVE-2024-38112",
7587
8834
  "CVE-2024-38178",
7588
8835
  "CVE-2024-38189",
@@ -7594,32 +8841,41 @@
7594
8841
  "CVE-2024-38856",
7595
8842
  "CVE-2024-39717",
7596
8843
  "CVE-2024-39722",
8844
+ "CVE-2024-39891",
7597
8845
  "CVE-2024-4040",
8846
+ "CVE-2024-40635",
7598
8847
  "CVE-2024-40711",
7599
8848
  "CVE-2024-40890",
7600
8849
  "CVE-2024-40891",
7601
8850
  "CVE-2024-41713",
8851
+ "CVE-2024-42009",
7602
8852
  "CVE-2024-42478",
7603
8853
  "CVE-2024-42479",
7604
8854
  "CVE-2024-43047",
7605
8855
  "CVE-2024-43093",
7606
8856
  "CVE-2024-43451",
8857
+ "CVE-2024-43468",
7607
8858
  "CVE-2024-43572",
7608
8859
  "CVE-2024-43573",
7609
8860
  "CVE-2024-44308",
7610
8861
  "CVE-2024-44309",
7611
8862
  "CVE-2024-45519",
7612
8863
  "CVE-2024-4610",
8864
+ "CVE-2024-4671",
7613
8865
  "CVE-2024-47575",
7614
8866
  "CVE-2024-4761",
7615
8867
  "CVE-2024-48248",
8868
+ "CVE-2024-4879",
7616
8869
  "CVE-2024-4885",
7617
8870
  "CVE-2024-49035",
8871
+ "CVE-2024-4978",
7618
8872
  "CVE-2024-50050",
7619
8873
  "CVE-2024-50302",
7620
8874
  "CVE-2024-50603",
7621
8875
  "CVE-2024-50623",
7622
8876
  "CVE-2024-51378",
8877
+ "CVE-2024-5217",
8878
+ "CVE-2024-5274",
7623
8879
  "CVE-2024-53104",
7624
8880
  "CVE-2024-53150",
7625
8881
  "CVE-2024-53197",
@@ -7627,32 +8883,64 @@
7627
8883
  "CVE-2024-55550",
7628
8884
  "CVE-2024-55591",
7629
8885
  "CVE-2024-5565",
8886
+ "CVE-2024-56145",
7630
8887
  "CVE-2024-57968",
7631
8888
  "CVE-2024-58136",
7632
8889
  "CVE-2024-5910",
7633
8890
  "CVE-2024-6047",
7634
8891
  "CVE-2024-7262",
8892
+ "CVE-2024-7399",
8893
+ "CVE-2024-7694",
8894
+ "CVE-2024-7965",
7635
8895
  "CVE-2024-7971",
8896
+ "CVE-2024-8068",
8897
+ "CVE-2024-8069",
8898
+ "CVE-2024-8190",
7636
8899
  "CVE-2024-8957",
7637
8900
  "CVE-2024-8963",
7638
8901
  "CVE-2024-9379",
7639
8902
  "CVE-2024-9380",
7640
8903
  "CVE-2024-9474",
7641
8904
  "CVE-2024-9526",
8905
+ "CVE-2024-9537",
7642
8906
  "CVE-2024-9680",
7643
8907
  "CVE-2025-0108",
7644
8908
  "CVE-2025-0111",
8909
+ "CVE-2025-0133",
7645
8910
  "CVE-2025-0282",
7646
8911
  "CVE-2025-0411",
8912
+ "CVE-2025-10035",
7647
8913
  "CVE-2025-10164",
8914
+ "CVE-2025-10585",
8915
+ "CVE-2025-1094",
8916
+ "CVE-2025-11371",
8917
+ "CVE-2025-11837",
8918
+ "CVE-2025-11953",
8919
+ "CVE-2025-12686",
7648
8920
  "CVE-2025-1316",
8921
+ "CVE-2025-13223",
8922
+ "CVE-2025-14174",
8923
+ "CVE-2025-14611",
8924
+ "CVE-2025-14733",
8925
+ "CVE-2025-14847",
7649
8926
  "CVE-2025-1550",
8927
+ "CVE-2025-15556",
7650
8928
  "CVE-2025-1753",
7651
8929
  "CVE-2025-1976",
8930
+ "CVE-2025-20333",
8931
+ "CVE-2025-20352",
8932
+ "CVE-2025-20393",
8933
+ "CVE-2025-21042",
8934
+ "CVE-2025-21043",
7652
8935
  "CVE-2025-21333",
7653
8936
  "CVE-2025-21334",
7654
8937
  "CVE-2025-21335",
8938
+ "CVE-2025-21479",
8939
+ "CVE-2025-21480",
7655
8940
  "CVE-2025-21590",
8941
+ "CVE-2025-22224",
8942
+ "CVE-2025-22225",
8943
+ "CVE-2025-22226",
7656
8944
  "CVE-2025-22457",
7657
8945
  "CVE-2025-23006",
7658
8946
  "CVE-2025-23209",
@@ -7661,104 +8949,252 @@
7661
8949
  "CVE-2025-24054",
7662
8950
  "CVE-2025-24085",
7663
8951
  "CVE-2025-24200",
8952
+ "CVE-2025-24201",
7664
8953
  "CVE-2025-24472",
7665
8954
  "CVE-2025-24813",
8955
+ "CVE-2025-24893",
7666
8956
  "CVE-2025-24983",
7667
8957
  "CVE-2025-24984",
7668
8958
  "CVE-2025-24985",
7669
8959
  "CVE-2025-24989",
8960
+ "CVE-2025-24990",
7670
8961
  "CVE-2025-24991",
7671
8962
  "CVE-2025-24993",
7672
8963
  "CVE-2025-25181",
8964
+ "CVE-2025-25257",
7673
8965
  "CVE-2025-25297",
8966
+ "CVE-2025-26399",
7674
8967
  "CVE-2025-26633",
8968
+ "CVE-2025-27038",
7675
8969
  "CVE-2025-27363",
8970
+ "CVE-2025-2749",
7676
8971
  "CVE-2025-27520",
8972
+ "CVE-2025-2775",
8973
+ "CVE-2025-2776",
7677
8974
  "CVE-2025-2783",
8975
+ "CVE-2025-27920",
8976
+ "CVE-2025-29635",
7678
8977
  "CVE-2025-29824",
8978
+ "CVE-2025-30066",
8979
+ "CVE-2025-30154",
7679
8980
  "CVE-2025-30165",
7680
8981
  "CVE-2025-30202",
8982
+ "CVE-2025-30397",
7681
8983
  "CVE-2025-30400",
7682
8984
  "CVE-2025-30406",
8985
+ "CVE-2025-31125",
7683
8986
  "CVE-2025-31161",
7684
8987
  "CVE-2025-31200",
7685
8988
  "CVE-2025-31201",
8989
+ "CVE-2025-31277",
7686
8990
  "CVE-2025-31324",
8991
+ "CVE-2025-32432",
7687
8992
  "CVE-2025-32434",
7688
8993
  "CVE-2025-32444",
8994
+ "CVE-2025-32463",
7689
8995
  "CVE-2025-3248",
8996
+ "CVE-2025-32701",
8997
+ "CVE-2025-32706",
8998
+ "CVE-2025-32709",
8999
+ "CVE-2025-32756",
9000
+ "CVE-2025-33053",
9001
+ "CVE-2025-33073",
7690
9002
  "CVE-2025-33236",
7691
9003
  "CVE-2025-34028",
7692
9004
  "CVE-2025-34291",
7693
9005
  "CVE-2025-3466",
9006
+ "CVE-2025-35939",
9007
+ "CVE-2025-37164",
9008
+ "CVE-2025-38352",
7694
9009
  "CVE-2025-3928",
9010
+ "CVE-2025-4008",
9011
+ "CVE-2025-40551",
9012
+ "CVE-2025-41244",
7695
9013
  "CVE-2025-42599",
9014
+ "CVE-2025-42999",
9015
+ "CVE-2025-43200",
9016
+ "CVE-2025-43300",
9017
+ "CVE-2025-43510",
9018
+ "CVE-2025-43520",
9019
+ "CVE-2025-43529",
9020
+ "CVE-2025-4428",
9021
+ "CVE-2025-4632",
7696
9022
  "CVE-2025-47729",
9023
+ "CVE-2025-47812",
9024
+ "CVE-2025-47813",
9025
+ "CVE-2025-47827",
9026
+ "CVE-2025-48384",
9027
+ "CVE-2025-48543",
9028
+ "CVE-2025-48572",
7697
9029
  "CVE-2025-48595",
9030
+ "CVE-2025-48633",
9031
+ "CVE-2025-48703",
9032
+ "CVE-2025-48927",
9033
+ "CVE-2025-4919",
7698
9034
  "CVE-2025-49596",
9035
+ "CVE-2025-49704",
9036
+ "CVE-2025-49844",
9037
+ "CVE-2025-5086",
7699
9038
  "CVE-2025-51480",
9039
+ "CVE-2025-52691",
9040
+ "CVE-2025-53521",
9041
+ "CVE-2025-53690",
9042
+ "CVE-2025-53770",
9043
+ "CVE-2025-53773",
9044
+ "CVE-2025-54068",
7700
9045
  "CVE-2025-54136",
9046
+ "CVE-2025-5419",
9047
+ "CVE-2025-54253",
9048
+ "CVE-2025-54313",
9049
+ "CVE-2025-54948",
9050
+ "CVE-2025-55177",
9051
+ "CVE-2025-55182",
9052
+ "CVE-2025-55319",
7701
9053
  "CVE-2025-56520",
9054
+ "CVE-2025-58034",
9055
+ "CVE-2025-58360",
9056
+ "CVE-2025-59230",
9057
+ "CVE-2025-59287",
9058
+ "CVE-2025-59374",
9059
+ "CVE-2025-59529",
9060
+ "CVE-2025-59689",
7702
9061
  "CVE-2025-60455",
9062
+ "CVE-2025-60710",
9063
+ "CVE-2025-61884",
9064
+ "CVE-2025-61932",
9065
+ "CVE-2025-6204",
9066
+ "CVE-2025-6205",
9067
+ "CVE-2025-6218",
9068
+ "CVE-2025-62215",
9069
+ "CVE-2025-62221",
9070
+ "CVE-2025-62847",
9071
+ "CVE-2025-62848",
9072
+ "CVE-2025-62849",
9073
+ "CVE-2025-64328",
9074
+ "CVE-2025-64446",
7703
9075
  "CVE-2025-64496",
9076
+ "CVE-2025-6543",
9077
+ "CVE-2025-6554",
9078
+ "CVE-2025-6558",
9079
+ "CVE-2025-66376",
9080
+ "CVE-2025-66644",
7704
9081
  "CVE-2025-67038",
7705
9082
  "CVE-2025-67818",
9083
+ "CVE-2025-68461",
9084
+ "CVE-2025-68613",
9085
+ "CVE-2025-68645",
9086
+ "CVE-2025-68664",
9087
+ "CVE-2025-68665",
7706
9088
  "CVE-2025-68668",
9089
+ "CVE-2025-68686",
9090
+ "CVE-2025-6965",
9091
+ "CVE-2025-7775",
9092
+ "CVE-2025-8088",
9093
+ "CVE-2025-8110",
7707
9094
  "CVE-2025-8747",
9095
+ "CVE-2025-8875",
9096
+ "CVE-2025-8876",
9097
+ "CVE-2025-9242",
9098
+ "CVE-2025-9377",
9099
+ "CVE-2026-0300",
7708
9100
  "CVE-2026-0766",
7709
9101
  "CVE-2026-0770",
7710
9102
  "CVE-2026-10520",
7711
9103
  "CVE-2026-11645",
7712
9104
  "CVE-2026-12569",
9105
+ "CVE-2026-1281",
9106
+ "CVE-2026-1340",
7713
9107
  "CVE-2026-15409",
7714
9108
  "CVE-2026-15410",
9109
+ "CVE-2026-16812",
9110
+ "CVE-2026-20045",
9111
+ "CVE-2026-20122",
9112
+ "CVE-2026-20131",
9113
+ "CVE-2026-20133",
7715
9114
  "CVE-2026-20230",
7716
9115
  "CVE-2026-20253",
7717
9116
  "CVE-2026-20262",
9117
+ "CVE-2026-20700",
9118
+ "CVE-2026-20805",
9119
+ "CVE-2026-20963",
9120
+ "CVE-2026-21385",
9121
+ "CVE-2026-21509",
9122
+ "CVE-2026-21510",
9123
+ "CVE-2026-21513",
9124
+ "CVE-2026-21514",
9125
+ "CVE-2026-21519",
9126
+ "CVE-2026-21643",
7718
9127
  "CVE-2026-21858",
7719
9128
  "CVE-2026-21877",
7720
9129
  "CVE-2026-22218",
7721
9130
  "CVE-2026-22219",
7722
9131
  "CVE-2026-22252",
7723
9132
  "CVE-2026-22688",
9133
+ "CVE-2026-22719",
9134
+ "CVE-2026-22778",
9135
+ "CVE-2026-24061",
7724
9136
  "CVE-2026-24213",
7725
9137
  "CVE-2026-24214",
7726
9138
  "CVE-2026-24215",
9139
+ "CVE-2026-2441",
9140
+ "CVE-2026-24423",
7727
9141
  "CVE-2026-25089",
9142
+ "CVE-2026-25108",
7728
9143
  "CVE-2026-25592",
7729
9144
  "CVE-2026-26015",
7730
9145
  "CVE-2026-28318",
7731
9146
  "CVE-2026-3059",
7732
9147
  "CVE-2026-3060",
9148
+ "CVE-2026-30615",
7733
9149
  "CVE-2026-30616",
7734
9150
  "CVE-2026-30617",
9151
+ "CVE-2026-30623",
7735
9152
  "CVE-2026-30624",
7736
9153
  "CVE-2026-30625",
7737
9154
  "CVE-2026-31229",
7738
9155
  "CVE-2026-31230",
9156
+ "CVE-2026-31431",
9157
+ "CVE-2026-31635",
9158
+ "CVE-2026-32201",
7739
9159
  "CVE-2026-33017",
9160
+ "CVE-2026-33825",
7740
9161
  "CVE-2026-34159",
9162
+ "CVE-2026-34197",
9163
+ "CVE-2026-34621",
7741
9164
  "CVE-2026-34908",
7742
9165
  "CVE-2026-34909",
7743
9166
  "CVE-2026-34910",
7744
9167
  "CVE-2026-34926",
9168
+ "CVE-2026-3502",
7745
9169
  "CVE-2026-35273",
9170
+ "CVE-2026-35616",
9171
+ "CVE-2026-3909",
9172
+ "CVE-2026-3910",
7746
9173
  "CVE-2026-39808",
9174
+ "CVE-2026-39884",
7747
9175
  "CVE-2026-40933",
7748
9176
  "CVE-2026-41091",
7749
9177
  "CVE-2026-42271",
9178
+ "CVE-2026-42897",
9179
+ "CVE-2026-42945",
9180
+ "CVE-2026-43284",
9181
+ "CVE-2026-43500",
7750
9182
  "CVE-2026-45247",
9183
+ "CVE-2026-45321",
7751
9184
  "CVE-2026-45498",
7752
9185
  "CVE-2026-45659",
7753
9186
  "CVE-2026-45829",
7754
9187
  "CVE-2026-46300",
7755
9188
  "CVE-2026-46333",
9189
+ "CVE-2026-48027",
7756
9190
  "CVE-2026-48172",
7757
9191
  "CVE-2026-48282",
7758
9192
  "CVE-2026-48558",
7759
9193
  "CVE-2026-48907",
7760
9194
  "CVE-2026-48908",
7761
9195
  "CVE-2026-48939",
9196
+ "CVE-2026-50522",
9197
+ "CVE-2026-5281",
7762
9198
  "CVE-2026-54420",
7763
9199
  "CVE-2026-56164",
7764
9200
  "CVE-2026-56291",
@@ -7766,11 +9202,20 @@
7766
9202
  "CVE-2026-58644",
7767
9203
  "CVE-2026-60137",
7768
9204
  "CVE-2026-63030",
9205
+ "CVE-2026-6973",
7769
9206
  "CVE-2026-7473",
9207
+ "CVE-2026-7482",
7770
9208
  "CVE-2026-8398",
7771
9209
  "CVE-2026-9082",
9210
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
9211
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
9212
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
9213
+ "MAL-2026-3083",
7772
9214
  "MAL-2026-MOIKA-DEPCONFUSION",
9215
+ "MAL-2026-NODE-IPC-STEALER",
9216
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
7773
9217
  "MAL-2026-SHAI-HULUD-OSS",
9218
+ "MAL-2026-TANSTACK-MINI",
7774
9219
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
7775
9220
  ],
7776
9221
  "atlas_refs": [],
@@ -7802,15 +9247,18 @@
7802
9247
  "status": "open",
7803
9248
  "opened_date": "2026-05-17",
7804
9249
  "evidence_cves": [
9250
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
7805
9251
  "CVE-2019-7256",
7806
9252
  "CVE-2020-29574",
7807
9253
  "CVE-2021-20123",
7808
9254
  "CVE-2021-33044",
7809
9255
  "CVE-2021-33045",
9256
+ "CVE-2021-38371",
7810
9257
  "CVE-2021-44207",
7811
9258
  "CVE-2022-0492",
7812
9259
  "CVE-2022-1471",
7813
9260
  "CVE-2022-36551",
9261
+ "CVE-2022-37055",
7814
9262
  "CVE-2023-20109",
7815
9263
  "CVE-2023-20198",
7816
9264
  "CVE-2023-20269",
@@ -7819,13 +9267,16 @@
7819
9267
  "CVE-2023-36033",
7820
9268
  "CVE-2023-36844",
7821
9269
  "CVE-2023-36851",
9270
+ "CVE-2023-38950",
7822
9271
  "CVE-2023-41179",
9272
+ "CVE-2023-43472",
7823
9273
  "CVE-2023-43654",
7824
9274
  "CVE-2023-43791",
7825
9275
  "CVE-2023-44467",
7826
9276
  "CVE-2023-46748",
7827
9277
  "CVE-2023-47117",
7828
9278
  "CVE-2023-48022",
9279
+ "CVE-2023-50224",
7829
9280
  "CVE-2023-51449",
7830
9281
  "CVE-2023-6016",
7831
9282
  "CVE-2023-6019",
@@ -7878,9 +9329,11 @@
7878
9329
  "CVE-2024-9526",
7879
9330
  "CVE-2025-0282",
7880
9331
  "CVE-2025-10164",
9332
+ "CVE-2025-10725",
7881
9333
  "CVE-2025-1550",
7882
9334
  "CVE-2025-1753",
7883
9335
  "CVE-2025-1796",
9336
+ "CVE-2025-21085",
7884
9337
  "CVE-2025-21391",
7885
9338
  "CVE-2025-22457",
7886
9339
  "CVE-2025-23254",
@@ -7904,6 +9357,7 @@
7904
9357
  "CVE-2025-48595",
7905
9358
  "CVE-2025-49596",
7906
9359
  "CVE-2025-51480",
9360
+ "CVE-2025-53767",
7907
9361
  "CVE-2025-54136",
7908
9362
  "CVE-2025-56520",
7909
9363
  "CVE-2025-60455",
@@ -7912,6 +9366,7 @@
7912
9366
  "CVE-2025-67818",
7913
9367
  "CVE-2025-68668",
7914
9368
  "CVE-2025-69286",
9369
+ "CVE-2025-8671",
7915
9370
  "CVE-2025-8747",
7916
9371
  "CVE-2026-0257",
7917
9372
  "CVE-2026-0766",
@@ -7962,7 +9417,8 @@
7962
9417
  "CVE-2026-5760",
7963
9418
  "CVE-2026-7473",
7964
9419
  "CVE-2026-8398",
7965
- "CVE-2026-9082"
9420
+ "CVE-2026-9082",
9421
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG"
7966
9422
  ],
7967
9423
  "atlas_refs": [],
7968
9424
  "attack_refs": [
@@ -8030,17 +9486,35 @@
8030
9486
  "status": "open",
8031
9487
  "opened_date": "2026-05-17",
8032
9488
  "evidence_cves": [
9489
+ "CVE-2020-10148",
9490
+ "CVE-2021-39144",
9491
+ "CVE-2021-45046",
9492
+ "CVE-2022-23748",
8033
9493
  "CVE-2022-23812",
9494
+ "CVE-2022-41328",
8034
9495
  "CVE-2024-11120",
9496
+ "CVE-2024-21626",
8035
9497
  "CVE-2024-24590",
8036
9498
  "CVE-2024-24591",
9499
+ "CVE-2024-3094",
8037
9500
  "CVE-2024-3154",
8038
9501
  "CVE-2024-37052",
8039
9502
  "CVE-2024-37060",
8040
9503
  "CVE-2024-6047",
9504
+ "CVE-2025-11837",
9505
+ "CVE-2025-15556",
9506
+ "CVE-2025-30066",
9507
+ "CVE-2025-30154",
9508
+ "CVE-2025-3935",
9509
+ "CVE-2025-54313",
9510
+ "CVE-2025-59287",
9511
+ "CVE-2026-30615",
9512
+ "CVE-2026-30623",
8041
9513
  "CVE-2026-31229",
8042
9514
  "CVE-2026-31230",
9515
+ "CVE-2026-48027",
8043
9516
  "CVE-2026-8398",
9517
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
8044
9518
  "MAL-2026-MOIKA-DEPCONFUSION",
8045
9519
  "MAL-2026-NODE-IPC-STEALER",
8046
9520
  "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
@@ -8179,24 +9653,43 @@
8179
9653
  "opened_date": "2026-05-18",
8180
9654
  "evidence_cves": [
8181
9655
  "CVE-2020-10148",
9656
+ "CVE-2021-27876",
9657
+ "CVE-2021-27877",
9658
+ "CVE-2021-44207",
8182
9659
  "CVE-2023-20198",
8183
9660
  "CVE-2023-20269",
9661
+ "CVE-2023-20867",
9662
+ "CVE-2023-27532",
9663
+ "CVE-2023-28432",
9664
+ "CVE-2023-29298",
9665
+ "CVE-2023-35078",
9666
+ "CVE-2023-38035",
8184
9667
  "CVE-2023-43791",
8185
9668
  "CVE-2023-47117",
8186
9669
  "CVE-2023-48022",
8187
9670
  "CVE-2023-6038",
8188
9671
  "CVE-2023-6448",
8189
9672
  "CVE-2024-12776",
9673
+ "CVE-2024-1709",
9674
+ "CVE-2024-20767",
8190
9675
  "CVE-2024-21182",
9676
+ "CVE-2024-29824",
9677
+ "CVE-2024-40766",
9678
+ "CVE-2025-10725",
8191
9679
  "CVE-2025-1796",
8192
9680
  "CVE-2025-3248",
8193
9681
  "CVE-2025-55241",
9682
+ "CVE-2026-16232",
9683
+ "CVE-2026-20182",
8194
9684
  "CVE-2026-24206",
8195
9685
  "CVE-2026-24207",
8196
9686
  "CVE-2026-33017",
8197
9687
  "CVE-2026-35273",
9688
+ "CVE-2026-39987",
8198
9689
  "CVE-2026-41947",
8199
- "CVE-2026-41950"
9690
+ "CVE-2026-41950",
9691
+ "CVE-2026-55255",
9692
+ "CVE-2026-56164"
8200
9693
  ],
8201
9694
  "atlas_refs": [],
8202
9695
  "attack_refs": [
@@ -8228,6 +9721,9 @@
8228
9721
  "status": "open",
8229
9722
  "opened_date": "2026-05-18",
8230
9723
  "evidence_cves": [
9724
+ "CVE-2024-20481",
9725
+ "CVE-2024-3393",
9726
+ "CVE-2024-40711",
8231
9727
  "CVE-2025-59389"
8232
9728
  ],
8233
9729
  "atlas_refs": [],
@@ -8262,12 +9758,16 @@
8262
9758
  "evidence_cves": [
8263
9759
  "CVE-2018-19410",
8264
9760
  "CVE-2020-10148",
9761
+ "CVE-2021-27877",
9762
+ "CVE-2021-27878",
8265
9763
  "CVE-2021-31196",
8266
9764
  "CVE-2021-33044",
8267
9765
  "CVE-2021-44207",
8268
9766
  "CVE-2022-1471",
8269
9767
  "CVE-2022-23227",
8270
9768
  "CVE-2023-20269",
9769
+ "CVE-2023-20867",
9770
+ "CVE-2023-27532",
8271
9771
  "CVE-2023-36761",
8272
9772
  "CVE-2023-43654",
8273
9773
  "CVE-2023-45249",
@@ -8305,6 +9805,7 @@
8305
9805
  "CVE-2025-69286",
8306
9806
  "CVE-2026-0257",
8307
9807
  "CVE-2026-10520",
9808
+ "CVE-2026-16232",
8308
9809
  "CVE-2026-20182",
8309
9810
  "CVE-2026-24206",
8310
9811
  "CVE-2026-24207",
@@ -8421,36 +9922,70 @@
8421
9922
  "status": "open",
8422
9923
  "opened_date": "2026-05-18",
8423
9924
  "evidence_cves": [
9925
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
9926
+ "CVE-2004-1464",
8424
9927
  "CVE-2008-4128",
9928
+ "CVE-2008-4250",
9929
+ "CVE-2010-0806",
9930
+ "CVE-2011-0411",
8425
9931
  "CVE-2014-2120",
9932
+ "CVE-2014-3931",
8426
9933
  "CVE-2014-8361",
9934
+ "CVE-2015-7755",
8427
9935
  "CVE-2016-20017",
8428
9936
  "CVE-2016-3714",
9937
+ "CVE-2016-6415",
9938
+ "CVE-2016-7836",
9939
+ "CVE-2016-8735",
9940
+ "CVE-2017-1000353",
8429
9941
  "CVE-2017-3506",
9942
+ "CVE-2017-6742",
8430
9943
  "CVE-2017-6884",
9944
+ "CVE-2017-7921",
9945
+ "CVE-2018-4063",
9946
+ "CVE-2019-19006",
8431
9947
  "CVE-2019-7256",
8432
9948
  "CVE-2020-13965",
8433
9949
  "CVE-2020-17519",
9950
+ "CVE-2020-24363",
9951
+ "CVE-2020-25078",
9952
+ "CVE-2020-25079",
8434
9953
  "CVE-2020-2883",
8435
9954
  "CVE-2021-20035",
8436
9955
  "CVE-2021-20123",
8437
9956
  "CVE-2021-20124",
9957
+ "CVE-2021-21311",
9958
+ "CVE-2021-22054",
9959
+ "CVE-2021-22175",
9960
+ "CVE-2021-22681",
9961
+ "CVE-2021-26828",
9962
+ "CVE-2021-26829",
8438
9963
  "CVE-2021-27137",
8439
9964
  "CVE-2021-33044",
8440
9965
  "CVE-2021-33045",
9966
+ "CVE-2021-33515",
8441
9967
  "CVE-2021-36380",
9968
+ "CVE-2021-38371",
9969
+ "CVE-2021-39935",
8442
9970
  "CVE-2021-40407",
8443
9971
  "CVE-2021-40655",
9972
+ "CVE-2022-20775",
8444
9973
  "CVE-2022-22948",
8445
9974
  "CVE-2022-36551",
9975
+ "CVE-2022-37055",
8446
9976
  "CVE-2023-20109",
8447
9977
  "CVE-2023-20198",
8448
9978
  "CVE-2023-20269",
8449
9979
  "CVE-2023-20273",
9980
+ "CVE-2023-21839",
9981
+ "CVE-2023-23397",
8450
9982
  "CVE-2023-25280",
9983
+ "CVE-2023-25717",
8451
9984
  "CVE-2023-28434",
8452
9985
  "CVE-2023-29552",
9986
+ "CVE-2023-33009",
8453
9987
  "CVE-2023-33246",
9988
+ "CVE-2023-33538",
8454
9989
  "CVE-2023-34048",
8455
9990
  "CVE-2023-35082",
8456
9991
  "CVE-2023-36761",
@@ -8459,7 +9994,10 @@
8459
9994
  "CVE-2023-36846",
8460
9995
  "CVE-2023-36847",
8461
9996
  "CVE-2023-36851",
9997
+ "CVE-2023-38950",
9998
+ "CVE-2023-39780",
8462
9999
  "CVE-2023-4346",
10000
+ "CVE-2023-43472",
8463
10001
  "CVE-2023-44221",
8464
10002
  "CVE-2023-44487",
8465
10003
  "CVE-2023-45249",
@@ -8467,11 +10005,13 @@
8467
10005
  "CVE-2023-47565",
8468
10006
  "CVE-2023-48788",
8469
10007
  "CVE-2023-49897",
10008
+ "CVE-2023-50224",
8470
10009
  "CVE-2023-50387",
8471
10010
  "CVE-2023-50868",
8472
10011
  "CVE-2023-51764",
8473
10012
  "CVE-2023-51765",
8474
10013
  "CVE-2023-51766",
10014
+ "CVE-2023-52163",
8475
10015
  "CVE-2023-6448",
8476
10016
  "CVE-2023-6548",
8477
10017
  "CVE-2023-6549",
@@ -8479,6 +10019,7 @@
8479
10019
  "CVE-2024-11667",
8480
10020
  "CVE-2024-1212",
8481
10021
  "CVE-2024-12450",
10022
+ "CVE-2024-12987",
8482
10023
  "CVE-2024-20353",
8483
10024
  "CVE-2024-20399",
8484
10025
  "CVE-2024-20481",
@@ -8493,30 +10034,78 @@
8493
10034
  "CVE-2024-31462",
8494
10035
  "CVE-2024-3273",
8495
10036
  "CVE-2024-3393",
10037
+ "CVE-2024-37079",
8496
10038
  "CVE-2024-38812",
10039
+ "CVE-2024-39717",
8497
10040
  "CVE-2024-39891",
8498
10041
  "CVE-2024-4040",
10042
+ "CVE-2024-40635",
10043
+ "CVE-2024-4358",
8499
10044
  "CVE-2024-50603",
10045
+ "CVE-2024-54085",
10046
+ "CVE-2024-8069",
8500
10047
  "CVE-2024-9474",
8501
10048
  "CVE-2025-0108",
8502
10049
  "CVE-2025-0282",
8503
10050
  "CVE-2025-10164",
10051
+ "CVE-2025-11371",
10052
+ "CVE-2025-11953",
8504
10053
  "CVE-2025-1316",
10054
+ "CVE-2025-14733",
8505
10055
  "CVE-2025-1976",
10056
+ "CVE-2025-20281",
10057
+ "CVE-2025-20333",
10058
+ "CVE-2025-20352",
10059
+ "CVE-2025-20362",
10060
+ "CVE-2025-20393",
8506
10061
  "CVE-2025-21590",
8507
10062
  "CVE-2025-22457",
8508
10063
  "CVE-2025-24472",
8509
10064
  "CVE-2025-25297",
10065
+ "CVE-2025-2746",
10066
+ "CVE-2025-27920",
10067
+ "CVE-2025-29635",
10068
+ "CVE-2025-31125",
8510
10069
  "CVE-2025-31161",
8511
10070
  "CVE-2025-31324",
10071
+ "CVE-2025-32756",
10072
+ "CVE-2025-33073",
10073
+ "CVE-2025-34026",
10074
+ "CVE-2025-37164",
10075
+ "CVE-2025-4008",
10076
+ "CVE-2025-40602",
10077
+ "CVE-2025-42999",
10078
+ "CVE-2025-4428",
10079
+ "CVE-2025-47812",
10080
+ "CVE-2025-48927",
10081
+ "CVE-2025-49844",
10082
+ "CVE-2025-5086",
8512
10083
  "CVE-2025-51480",
10084
+ "CVE-2025-54309",
10085
+ "CVE-2025-54948",
8513
10086
  "CVE-2025-56520",
10087
+ "CVE-2025-57819",
10088
+ "CVE-2025-58034",
10089
+ "CVE-2025-58360",
10090
+ "CVE-2025-59718",
10091
+ "CVE-2025-61757",
10092
+ "CVE-2025-61932",
10093
+ "CVE-2025-62848",
10094
+ "CVE-2025-64446",
8514
10095
  "CVE-2025-67038",
10096
+ "CVE-2025-68645",
8515
10097
  "CVE-2025-68668",
10098
+ "CVE-2025-9242",
8516
10099
  "CVE-2026-0257",
8517
10100
  "CVE-2026-0770",
8518
10101
  "CVE-2026-15409",
8519
10102
  "CVE-2026-15410",
10103
+ "CVE-2026-1603",
10104
+ "CVE-2026-16812",
10105
+ "CVE-2026-20122",
10106
+ "CVE-2026-20127",
10107
+ "CVE-2026-20128",
10108
+ "CVE-2026-20133",
8520
10109
  "CVE-2026-20182",
8521
10110
  "CVE-2026-20230",
8522
10111
  "CVE-2026-20262",
@@ -8524,11 +10113,17 @@
8524
10113
  "CVE-2026-21877",
8525
10114
  "CVE-2026-22218",
8526
10115
  "CVE-2026-22219",
10116
+ "CVE-2026-24061",
10117
+ "CVE-2026-24858",
10118
+ "CVE-2026-25108",
8527
10119
  "CVE-2026-3059",
8528
10120
  "CVE-2026-3060",
8529
10121
  "CVE-2026-34908",
8530
10122
  "CVE-2026-34909",
8531
10123
  "CVE-2026-34910",
10124
+ "CVE-2026-3502",
10125
+ "CVE-2026-35616",
10126
+ "CVE-2026-43284",
8532
10127
  "CVE-2026-50751",
8533
10128
  "CVE-2026-56290",
8534
10129
  "CVE-2026-5760",
@@ -8820,6 +10415,7 @@
8820
10415
  "status": "open",
8821
10416
  "opened_at": "2026-05-18",
8822
10417
  "evidence_cves": [
10418
+ "CVE-2023-21492",
8823
10419
  "CVE-2025-21085"
8824
10420
  ],
8825
10421
  "theater_test": {
@@ -8908,17 +10504,25 @@
8908
10504
  "opened_at": "2026-05-18",
8909
10505
  "evidence_cves": [
8910
10506
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
10507
+ "CVE-2010-3904",
10508
+ "CVE-2016-3427",
10509
+ "CVE-2016-8735",
10510
+ "CVE-2017-7494",
8911
10511
  "CVE-2018-19410",
8912
10512
  "CVE-2018-9276",
8913
10513
  "CVE-2019-11001",
8914
10514
  "CVE-2019-7256",
10515
+ "CVE-2020-15415",
8915
10516
  "CVE-2021-40407",
8916
10517
  "CVE-2021-41277",
8917
10518
  "CVE-2022-22948",
8918
10519
  "CVE-2023-20273",
10520
+ "CVE-2023-25280",
8919
10521
  "CVE-2023-27524",
8920
10522
  "CVE-2023-29552",
10523
+ "CVE-2023-45727",
8921
10524
  "CVE-2023-49103",
10525
+ "CVE-2024-0012",
8922
10526
  "CVE-2024-11120",
8923
10527
  "CVE-2024-29059",
8924
10528
  "CVE-2024-3272",
@@ -8929,14 +10533,18 @@
8929
10533
  "CVE-2024-43093",
8930
10534
  "CVE-2024-45195",
8931
10535
  "CVE-2024-4577",
10536
+ "CVE-2024-55956",
8932
10537
  "CVE-2024-5910",
8933
10538
  "CVE-2024-6047",
10539
+ "CVE-2024-8956",
8934
10540
  "CVE-2024-8957",
10541
+ "CVE-2024-9379",
8935
10542
  "CVE-2025-0108",
8936
10543
  "CVE-2025-49844",
8937
10544
  "CVE-2025-59529",
8938
10545
  "CVE-2025-8671",
8939
- "CVE-2026-48939"
10546
+ "CVE-2026-48939",
10547
+ "CVE-2026-7482"
8940
10548
  ],
8941
10549
  "theater_test": {
8942
10550
  "claim": "We are compliant with A.8.9 (Configuration management) because we follow the documented requirement: Annex A.8.9 — establishing, documenting, implementing, monitoring, and reviewing configurations of hardware, software, services, and networks. Anchored on a documented baseline and continuous monitori",
@@ -8992,8 +10600,11 @@
8992
10600
  "status": "open",
8993
10601
  "opened_at": "2026-05-18",
8994
10602
  "evidence_cves": [
10603
+ "CVE-2016-6415",
10604
+ "CVE-2024-43451",
8995
10605
  "CVE-2025-14847",
8996
10606
  "CVE-2025-22226",
10607
+ "CVE-2025-23209",
8997
10608
  "CVE-2025-47729",
8998
10609
  "CVE-2025-69286"
8999
10610
  ],
@@ -9088,6 +10699,7 @@
9088
10699
  "status": "open",
9089
10700
  "opened_at": "2026-05-18",
9090
10701
  "evidence_cves": [
10702
+ "CVE-2004-1464",
9091
10703
  "CVE-2025-59529",
9092
10704
  "CVE-2025-8671",
9093
10705
  "CVE-2026-28318"
@@ -9146,7 +10758,10 @@
9146
10758
  "status": "open",
9147
10759
  "opened_at": "2026-05-18",
9148
10760
  "evidence_cves": [
10761
+ "CVE-2023-38180",
10762
+ "CVE-2025-6543",
9149
10763
  "CVE-2025-8671",
10764
+ "CVE-2026-21525",
9150
10765
  "CVE-2026-31635"
9151
10766
  ],
9152
10767
  "theater_test": {
@@ -9618,9 +11233,15 @@
9618
11233
  "opened_at": "2026-05-18",
9619
11234
  "evidence_cves": [
9620
11235
  "CVE-2022-23812",
11236
+ "CVE-2024-40890",
11237
+ "CVE-2024-50623",
11238
+ "CVE-2026-45321",
11239
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
9621
11240
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
11241
+ "MAL-2026-3083",
9622
11242
  "MAL-2026-MOIKA-DEPCONFUSION",
9623
11243
  "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
11244
+ "MAL-2026-SHAI-HULUD-OSS",
9624
11245
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
9625
11246
  ],
9626
11247
  "theater_test": {
@@ -10036,6 +11657,7 @@
10036
11657
  "CVE-2022-0492",
10037
11658
  "CVE-2023-21529",
10038
11659
  "CVE-2023-22518",
11660
+ "CVE-2023-26083",
10039
11661
  "CVE-2023-26369",
10040
11662
  "CVE-2023-27351",
10041
11663
  "CVE-2023-38203",