@blamejs/exceptd-skills 0.18.29 → 0.18.30

package/data/_indexes/chains.json

@@ -852,7 +852,7 @@
     "rwep": 75,
     "cvss": 9.1,
     "cisa_kev": true,
-    "epss_score": 0.12685,
+    "epss_score": 0.71391,
     "epss_percentile": 0.95846,
     "referencing_skills": [
       "rag-pipeline-security",
@@ -1293,7 +1293,7 @@
     "rwep": 81,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.57101,
+    "epss_score": 0.7576,
     "epss_percentile": 0.98975,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -5842,7 +5842,7 @@
     "rwep": 62,
     "cvss": 6.1,
     "cisa_kev": true,
-    "epss_score": 0.54538,
+    "epss_score": 0.46709,
     "epss_percentile": 0.98914,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -58621,7 +58621,7 @@
     "rwep": 79,
     "cvss": 7.8,
     "cisa_kev": true,
-    "epss_score": 0.51865,
+    "epss_score": 0.5981,
     "epss_percentile": 0.98833,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -73032,7 +73032,7 @@
     "cvss": 7.8,
     "cisa_kev": true,
     "epss_score": 0.01145,
-    "epss_percentile": 0.63213,
+    "epss_percentile": 0.68783,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -119188,7 +119188,7 @@
     "cvss": 9.8,
     "cisa_kev": true,
     "epss_score": 0.01296,
-    "epss_percentile": 0.67106,
+    "epss_percentile": 0.92603,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -119761,7 +119761,7 @@
     "rwep": 57,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.23393,
+    "epss_score": 0.73603,
     "epss_percentile": 0.97528,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -120335,7 +120335,7 @@
     "rwep": 79,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.48668,
+    "epss_score": 0.9121,
     "epss_percentile": 0.9874,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -120909,8 +120909,8 @@
     "rwep": 53,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.01045,
-    "epss_percentile": 0.60266,
+    "epss_score": 0.13309,
+    "epss_percentile": 0.96021,
     "referencing_skills": [
       "kernel-lpe-triage",
       "rag-pipeline-security",
@@ -122183,7 +122183,7 @@
     "cvss": 7.8,
     "cisa_kev": true,
     "epss_score": 0.00379,
-    "epss_percentile": 0.30157,
+    "epss_percentile": 0.81925,
     "referencing_skills": [
       "kernel-lpe-triage",
       "rag-pipeline-security",
@@ -122738,8 +122738,8 @@
     "rwep": 61,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.05601,
-    "epss_percentile": 0.92028,
+    "epss_score": 0.22439,
+    "epss_percentile": 0.97467,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -123191,8 +123191,8 @@
     "rwep": 61,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.01266,
-    "epss_percentile": 0.66447,
+    "epss_score": 0.7844,
+    "epss_percentile": 0.99541,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -123659,8 +123659,8 @@
     "rwep": 56,
     "cvss": 7.2,
     "cisa_kev": true,
-    "epss_score": 0.01486,
-    "epss_percentile": 0.71117,
+    "epss_score": 0.76347,
+    "epss_percentile": 0.99489,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-attack-surface",
@@ -124294,7 +124294,7 @@
     "rwep": 70,
     "cvss": 4.3,
     "cisa_kev": true,
-    "epss_score": 0.23857,
+    "epss_score": 0.32953,
     "epss_percentile": 0.97573,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -183370,8 +183370,8 @@
     "rwep": 65,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.00836,
-    "epss_percentile": 0.53473,
+    "epss_score": 0.76066,
+    "epss_percentile": 0.99485,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -183866,8 +183866,8 @@
     "rwep": 63,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.01505,
-    "epss_percentile": 0.71365,
+    "epss_score": 0.82501,
+    "epss_percentile": 0.99634,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-attack-surface",
@@ -184666,8 +184666,8 @@
     "rwep": 62,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.02912,
-    "epss_percentile": 0.85373,
+    "epss_score": 0.83254,
+    "epss_percentile": 0.9965,
     "referencing_skills": [
       "kernel-lpe-triage",
       "mcp-agent-trust",
@@ -185367,8 +185367,8 @@
     "rwep": 65,
     "cvss": 8.4,
     "cisa_kev": true,
-    "epss_score": 0.00467,
-    "epss_percentile": 0.37303,
+    "epss_score": 0.29052,
+    "epss_percentile": 0.97979,
     "referencing_skills": [
       "kernel-lpe-triage",
       "rag-pipeline-security",
@@ -185919,8 +185919,8 @@
     "rwep": 68,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.01569,
-    "epss_percentile": 0.72455,
+    "epss_score": 0.8813,
+    "epss_percentile": 0.99752,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -186415,7 +186415,7 @@
     "rwep": 74,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.28583,
+    "epss_score": 0.99197,
     "epss_percentile": 0.97907,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -230962,7 +230962,7 @@
     "rwep": 50,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.32568,
+    "epss_score": 0.23184,
     "epss_percentile": 0.98139,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -235123,7 +235123,7 @@
     "rwep": 81,
     "cvss": 7.8,
     "cisa_kev": true,
-    "epss_score": 0.60954,
+    "epss_score": 0.66571,
     "epss_percentile": 0.99047,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -240211,7 +240211,7 @@
     "rwep": 59,
     "cvss": 8.8,
     "cisa_kev": true,
-    "epss_score": 0.03219,
+    "epss_score": 0.0912,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -240706,7 +240706,7 @@
     "rwep": 50,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.0116,
+    "epss_score": 0.11484,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -252221,7 +252221,7 @@
     "rwep": 85,
     "cvss": 9,
     "cisa_kev": true,
-    "epss_score": 0.94129,
+    "epss_score": 0.99971,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -252716,7 +252716,7 @@
     "rwep": 83,
     "cvss": 9,
     "cisa_kev": true,
-    "epss_score": 0.58941,
+    "epss_score": 0.9999,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -253211,7 +253211,7 @@
     "rwep": 78,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.3151,
+    "epss_score": 0.99512,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -253706,7 +253706,7 @@
     "rwep": 76,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.88937,
+    "epss_score": 0.99947,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -254201,7 +254201,7 @@
     "rwep": 78,
     "cvss": 8.6,
     "cisa_kev": true,
-    "epss_score": 0.9183,
+    "epss_score": 0.72391,
     "referencing_skills": [
       "ai-attack-surface",
       "mcp-agent-trust",
@@ -254952,7 +254952,7 @@
     "rwep": 72,
     "cvss": 8.6,
     "cisa_kev": true,
-    "epss_score": 0.34556,
+    "epss_score": 0.02296,
     "referencing_skills": [
       "ai-attack-surface",
       "mcp-agent-trust",
@@ -256528,7 +256528,7 @@
     "cvss": 7.8,
     "cisa_kev": false,
     "epss_score": 0.046,
-    "epss_percentile": 0.893,
+    "epss_percentile": 0.83649,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-attack-surface",
@@ -257363,8 +257363,8 @@
     "rwep": 35,
     "cvss": 8,
     "cisa_kev": false,
-    "epss_score": 0.14,
-    "epss_percentile": 0.86,
+    "epss_score": 0.00281,
+    "epss_percentile": 0.20294,
     "referencing_skills": [
       "ai-attack-surface",
       "mcp-agent-trust",
@@ -258125,8 +258125,8 @@
     "rwep": 90,
     "cvss": 7.8,
     "cisa_kev": true,
-    "epss_score": 0.0257,
-    "epss_percentile": 0.8569,
+    "epss_score": 0.99907,
+    "epss_percentile": 0.99967,
     "referencing_skills": [
       "kernel-lpe-triage",
       "exploit-scoring",
@@ -258628,7 +258628,7 @@
     "cvss": 8.3,
     "cisa_kev": false,
     "epss_score": 0.00039,
-    "epss_percentile": 0.11727,
+    "epss_percentile": 0.1734,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-attack-surface",
@@ -259414,7 +259414,7 @@
     "rwep": 65,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.37368,
+    "epss_score": 0.8942,
     "epss_percentile": 0.9722,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -260124,8 +260124,8 @@
     "rwep": 53,
     "cvss": 8.8,
     "cisa_kev": false,
-    "epss_score": 0.00007,
-    "epss_percentile": 0.0051,
+    "epss_score": 0.93235,
+    "epss_percentile": 0.99826,
     "referencing_skills": [
       "kernel-lpe-triage",
       "pqc-first",
@@ -260699,8 +260699,8 @@
     "rwep": 47,
     "cvss": 7.6,
     "cisa_kev": false,
-    "epss_score": 0.0001,
-    "epss_percentile": 0.0115,
+    "epss_score": 0.92855,
+    "epss_percentile": 0.9982,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -261192,11 +261192,11 @@
   },
   "CVE-2026-45321": {
     "name": "Mini Shai-Hulud TanStack npm worm",
-    "rwep": 45,
+    "rwep": 70,
     "cvss": 9.6,
-    "cisa_kev": false,
+    "cisa_kev": true,
     "epss_score": 0.00039,
-    "epss_percentile": 0.1179,
+    "epss_percentile": 0.8201,
     "referencing_skills": [
       "kernel-lpe-triage",
       "mcp-agent-trust",
@@ -263170,10 +263170,10 @@
   },
   "CVE-2024-21626": {
     "name": "runc /proc/self/fd leak (Leaky Vessels)",
-    "rwep": 80,
+    "rwep": 35,
     "cvss": 8.6,
-    "cisa_kev": true,
-    "epss_score": 0.65,
+    "cisa_kev": false,
+    "epss_score": 0.18087,
     "referencing_skills": [
       "kernel-lpe-triage",
       "coordinated-vuln-disclosure",
@@ -263483,9 +263483,9 @@
   },
   "CVE-2024-3094": {
     "name": "xz-utils liblzma backdoor",
-    "rwep": 70,
+    "rwep": 45,
     "cvss": 10,
-    "cisa_kev": true,
+    "cisa_kev": false,
     "epss_score": 0.86,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -264849,7 +264849,7 @@
     "rwep": 35,
     "cvss": 7.5,
     "cisa_kev": false,
-    "epss_score": 0.014,
+    "epss_score": 0.36582,
     "referencing_skills": [
       "ai-attack-surface",
       "rag-pipeline-security",
@@ -266772,7 +266772,7 @@
     "rwep": 65,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.5,
+    "epss_score": 0.90272,
     "referencing_skills": [
       "rag-pipeline-security",
       "identity-assurance",
@@ -283578,9 +283578,9 @@
   },
   "CVE-2025-1094": {
     "name": "PostgreSQL psql SQL Injection via Invalid UTF-8 → ACE",
-    "rwep": 77,
+    "rwep": 52,
     "cvss": 8.1,
-    "cisa_kev": true,
+    "cisa_kev": false,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-attack-surface",
@@ -285048,9 +285048,9 @@
   },
   "CVE-2025-14847": {
     "name": "MongoDB Server zlib Heap-Memory Disclosure ('MongoBleed')",
-    "rwep": 47,
+    "rwep": 72,
     "cvss": 7.5,
-    "cisa_kev": false,
+    "cisa_kev": true,
     "referencing_skills": [
       "kernel-lpe-triage",
       "pqc-first",
@@ -496958,7 +496958,7 @@
     "rwep": 19,
     "cvss": 7.1,
     "cisa_kev": false,
-    "epss_score": 0.00044,
+    "epss_score": 0.08845,
     "referencing_skills": [
       "ai-attack-surface",
       "compliance-theater",
@@ -500526,7 +500526,7 @@
     "rwep": 31,
     "cvss": 10,
     "cisa_kev": false,
-    "epss_score": 0.06939,
+    "epss_score": 0.71647,
     "referencing_skills": [
       "ai-attack-surface",
       "compliance-theater",
@@ -501096,7 +501096,7 @@
     "rwep": 27,
     "cvss": 9.9,
     "cisa_kev": false,
-    "epss_score": 0.00035,
+    "epss_score": 0.12901,
     "referencing_skills": [
       "ai-attack-surface",
       "compliance-theater",
@@ -503609,7 +503609,7 @@
     "rwep": 29,
     "cvss": 9.9,
     "cisa_kev": false,
-    "epss_score": 0.10735,
+    "epss_score": 0.05258,
     "referencing_skills": [
       "ai-attack-surface",
       "compliance-theater",
@@ -523564,7 +523564,7 @@
     "rwep": 79,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.02269,
+    "epss_score": 0.62767,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -524137,7 +524137,7 @@
     "rwep": 79,
     "cvss": 10,
     "cisa_kev": true,
-    "epss_score": 0.0086,
+    "epss_score": 0.61906,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -525205,7 +525205,7 @@
     "rwep": 70,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.80425,
+    "epss_score": 0.55914,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -526195,7 +526195,7 @@
     "rwep": 77,
     "cvss": 6.5,
     "cisa_kev": true,
-    "epss_score": 0.01741,
+    "epss_score": 0.28171,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -527758,7 +527758,7 @@
     "rwep": 76,
     "cvss": 9.1,
     "cisa_kev": true,
-    "epss_score": 0.9393,
+    "epss_score": 0.99957,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -530389,7 +530389,7 @@
     "rwep": 81,
     "cvss": 6.5,
     "cisa_kev": true,
-    "epss_score": 0.1193,
+    "epss_score": 0.58616,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -541018,7 +541018,7 @@
     "rwep": 57,
     "cvss": 4.6,
     "cisa_kev": true,
-    "epss_score": 0.163,
+    "epss_score": 0.01972,
     "referencing_skills": [
       "kernel-lpe-triage",
       "attack-surface-pentest",
@@ -542008,7 +542008,7 @@
     "rwep": 78,
     "cvss": 5.9,
     "cisa_kev": true,
-    "epss_score": 0.20395,
+    "epss_score": 0.79029,
     "epss_percentile": 0.97219,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -542504,7 +542504,7 @@
     "rwep": 79,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.38599,
+    "epss_score": 0.98417,
     "epss_percentile": 0.98425,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -544072,7 +544072,7 @@
     "rwep": 70,
     "cvss": 8.1,
     "cisa_kev": true,
-    "epss_score": 0.10809,
+    "epss_score": 0.16488,
     "epss_percentile": 0.95377,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -544569,7 +544569,7 @@
     "cvss": 8.2,
     "cisa_kev": true,
     "epss_score": 0.0027,
-    "epss_percentile": 0.19053,
+    "epss_percentile": 0.39697,
     "referencing_skills": [
       "kernel-lpe-triage",
       "rag-pipeline-security",
@@ -545077,7 +545077,7 @@
     "rwep": 81,
     "cvss": 7.5,
     "cisa_kev": true,
-    "epss_score": 0.42627,
+    "epss_score": 0.8116,
     "epss_percentile": 0.9858,
     "referencing_skills": [
       "kernel-lpe-triage",
@@ -545838,8 +545838,8 @@
     "rwep": 68,
     "cvss": 9.8,
     "cisa_kev": true,
-    "epss_score": 0.01886,
-    "epss_percentile": 0.77474,
+    "epss_score": 0.17053,
+    "epss_percentile": 0.96777,
     "referencing_skills": [
       "ai-attack-surface",
       "mcp-agent-trust",
@@ -546567,7 +546567,7 @@
     "cvss": 8.2,
     "cisa_kev": true,
     "epss_score": 0.02529,
-    "epss_percentile": 0.83327,
+    "epss_percentile": 0.89781,
     "referencing_skills": [
       "kernel-lpe-triage",
       "ai-c2-detection",
@@ -600061,6 +600061,998 @@
       ]
     }
   },
+  "CVE-2026-63077": {
+    "name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability",
+    "rwep": 72,
+    "cvss": 9.8,
+    "cisa_kev": true,
+    "epss_score": 0.0101,
+    "epss_percentile": 0.59827,
+    "referencing_skills": [
+      "kernel-lpe-triage",
+      "attack-surface-pentest",
+      "ot-ics-security",
+      "coordinated-vuln-disclosure",
+      "sector-energy",
+      "mail-server-hardening",
+      "network-trust",
+      "audit-log-integrity",
+      "self-update-integrity",
+      "multitenancy-isolation",
+      "decompression-dos",
+      "log-injection-telemetry",
+      "privacy-consent-ops"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1037",
+          "name": "Processor Optimization Removal or Modification of Security-critical Code",
+          "category": "Hardware / Side Channel"
+        },
+        {
+          "id": "CWE-117",
+          "name": "Improper Output Neutralization for Logs",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-125",
+          "name": "Out-of-bounds Read",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-1333",
+          "name": "Inefficient Regular Expression Complexity",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-1357",
+          "name": "Reliance on Insufficiently Trustworthy Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-284",
+          "name": "Improper Access Control",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-306",
+          "name": "Missing Authentication for Critical Function",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-345",
+          "name": "Insufficient Verification of Data Authenticity",
+          "category": "Authenticity / Supply Chain"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-353",
+          "name": "Missing Support for Integrity Check",
+          "category": "Integrity"
+        },
+        {
+          "id": "CWE-362",
+          "name": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)",
+          "category": "Concurrency"
+        },
+        {
+          "id": "CWE-400",
+          "name": "Uncontrolled Resource Consumption",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-409",
+          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-416",
+          "name": "Use After Free",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-494",
+          "name": "Download of Code Without Integrity Check",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-532",
+          "name": "Insertion of Sensitive Information into Log File",
+          "category": "Information Disclosure"
+        },
+        {
+          "id": "CWE-611",
+          "name": "Improper Restriction of XML External Entity Reference",
+          "category": "XML / Injection"
+        },
+        {
+          "id": "CWE-639",
+          "name": "Authorization Bypass Through User-Controlled Key",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-668",
+          "name": "Exposure of Resource to Wrong Sphere",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-770",
+          "name": "Allocation of Resources Without Limits or Throttling",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-776",
+          "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+          "category": "XML"
+        },
+        {
+          "id": "CWE-778",
+          "name": "Insufficient Logging",
+          "category": "Logging"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-798",
+          "name": "Use of Hard-coded Credentials",
+          "category": "Credentials"
+        },
+        {
+          "id": "CWE-807",
+          "name": "Reliance on Untrusted Inputs in a Security Decision",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-829",
+          "name": "Inclusion of Functionality from Untrusted Control Sphere",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-834",
+          "name": "Excessive Iteration",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-93",
+          "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-ASLR",
+          "name": "Address Space Layout Randomization",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-EAL",
+          "name": "Executable Allowlisting",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-NI",
+          "name": "Network Isolation",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTPM",
+          "name": "Network Traffic Policy Mapping",
+          "tactic": "Model"
+        },
+        {
+          "id": "D3-PA",
+          "name": "Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-PHRA",
+          "name": "Process Hardware Resource Access",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-PSEP",
+          "name": "Process Segment Execution Prevention",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-SCP",
+          "name": "System Call Filtering",
+          "tactic": "Isolate"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "AU-Essential-8-App-Hardening",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "User application hardening"
+        },
+        {
+          "id": "AU-Essential-8-Backup",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Regular backups"
+        },
+        {
+          "id": "AU-Essential-8-Patch",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Patch operating systems"
+        },
+        {
+          "id": "AU-ISM-1556",
+          "framework": "au-ism",
+          "control_name": "Multi-factor authentication for privileged users (telecom NMS application)"
+        },
+        {
+          "id": "CIS-Controls-v8-Control7",
+          "framework": "CIS Controls v8",
+          "control_name": "Continuous Vulnerability Management"
+        },
+        {
+          "id": "IEC-62443-3-3",
+          "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
+          "control_name": "System security requirements and security levels"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.15",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Logging"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.21",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Security of network services"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.8",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Management of technical vulnerabilities"
+        },
+        {
+          "id": "NERC-CIP-007-6-R4",
+          "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
+          "control_name": "Security event monitoring"
+        },
+        {
+          "id": "NIS2-Art21-incident-handling",
+          "framework": "EU NIS2 Directive (2022/2555)",
+          "control_name": "Incident handling"
+        },
+        {
+          "id": "NIS2-Art21-network-security",
+          "framework": "EU NIS2 Directive (Directive (EU) 2022/2555)",
+          "control_name": "Security of network and information systems"
+        },
+        {
+          "id": "NIS2-Art21-patch-management",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Vulnerability handling and disclosure"
+        },
+        {
+          "id": "NIST-800-115",
+          "framework": "NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)",
+          "control_name": "Technical Guide to Information Security Testing and Assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Access Enforcement"
+        },
+        {
+          "id": "NIST-800-53-SC-8",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Transmission Confidentiality and Integrity"
+        },
+        {
+          "id": "NIST-800-53-SI-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Flaw Remediation"
+        },
+        {
+          "id": "NIST-800-53-SR-11",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Component Authenticity"
+        },
+        {
+          "id": "NIST-800-82r3",
+          "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
+          "control_name": "Guide to Operational Technology (OT) Security"
+        },
+        {
+          "id": "OWASP-Pen-Testing-Guide-v5",
+          "framework": "OWASP Web Security Testing Guide v5 (WSTG)",
+          "control_name": "Web application penetration testing methodology"
+        },
+        {
+          "id": "PCI-DSS-4.0-6.3.3",
+          "framework": "PCI DSS 4.0",
+          "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "PTES-Pre-engagement",
+          "framework": "Penetration Testing Execution Standard (PTES)",
+          "control_name": "Pre-engagement Interactions"
+        },
+        {
+          "id": "SOC2-CC7-anomaly-detection",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "SOC2-CC9-vendor-management",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-A1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Governance"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
+        {
+          "id": "UK-CAF-B4",
+          "framework": "UK NCSC Cyber Assessment Framework (CAF)",
+          "control_name": "System security"
+        },
+        {
+          "id": "UK-CAF-D1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Response and recovery planning"
+        }
+      ],
+      "attack_refs": [
+        "T0855",
+        "T0883",
+        "T1036",
+        "T1059",
+        "T1068",
+        "T1070",
+        "T1071.003",
+        "T1071.004",
+        "T1078",
+        "T1133",
+        "T1190",
+        "T1195.002",
+        "T1213",
+        "T1499",
+        "T1499.001",
+        "T1530",
+        "T1548.001",
+        "T1556",
+        "T1557",
+        "T1562.008",
+        "T1565.001",
+        "T1574"
+      ],
+      "rfc_refs": [
+        "CSAF-2.0",
+        "ISO-29147",
+        "ISO-30111",
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-7296",
+        "RFC-9116"
+      ]
+    }
+  },
+  "CVE-2026-8037": {
+    "name": "Progress LoadMaster Command Injection Vulnerability",
+    "rwep": 79,
+    "cvss": 9.6,
+    "cisa_kev": true,
+    "epss_score": 0.84793,
+    "epss_percentile": 0.99688,
+    "referencing_skills": [
+      "kernel-lpe-triage",
+      "attack-surface-pentest",
+      "ot-ics-security",
+      "coordinated-vuln-disclosure",
+      "sector-energy",
+      "mail-server-hardening",
+      "network-trust",
+      "audit-log-integrity",
+      "self-update-integrity",
+      "multitenancy-isolation",
+      "decompression-dos",
+      "log-injection-telemetry",
+      "privacy-consent-ops"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1037",
+          "name": "Processor Optimization Removal or Modification of Security-critical Code",
+          "category": "Hardware / Side Channel"
+        },
+        {
+          "id": "CWE-117",
+          "name": "Improper Output Neutralization for Logs",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-125",
+          "name": "Out-of-bounds Read",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-1333",
+          "name": "Inefficient Regular Expression Complexity",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-1357",
+          "name": "Reliance on Insufficiently Trustworthy Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-284",
+          "name": "Improper Access Control",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-306",
+          "name": "Missing Authentication for Critical Function",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-345",
+          "name": "Insufficient Verification of Data Authenticity",
+          "category": "Authenticity / Supply Chain"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-353",
+          "name": "Missing Support for Integrity Check",
+          "category": "Integrity"
+        },
+        {
+          "id": "CWE-362",
+          "name": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)",
+          "category": "Concurrency"
+        },
+        {
+          "id": "CWE-400",
+          "name": "Uncontrolled Resource Consumption",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-409",
+          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-416",
+          "name": "Use After Free",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-494",
+          "name": "Download of Code Without Integrity Check",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-532",
+          "name": "Insertion of Sensitive Information into Log File",
+          "category": "Information Disclosure"
+        },
+        {
+          "id": "CWE-611",
+          "name": "Improper Restriction of XML External Entity Reference",
+          "category": "XML / Injection"
+        },
+        {
+          "id": "CWE-639",
+          "name": "Authorization Bypass Through User-Controlled Key",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-668",
+          "name": "Exposure of Resource to Wrong Sphere",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-770",
+          "name": "Allocation of Resources Without Limits or Throttling",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-776",
+          "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+          "category": "XML"
+        },
+        {
+          "id": "CWE-778",
+          "name": "Insufficient Logging",
+          "category": "Logging"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-798",
+          "name": "Use of Hard-coded Credentials",
+          "category": "Credentials"
+        },
+        {
+          "id": "CWE-807",
+          "name": "Reliance on Untrusted Inputs in a Security Decision",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-829",
+          "name": "Inclusion of Functionality from Untrusted Control Sphere",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-834",
+          "name": "Excessive Iteration",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-93",
+          "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-ASLR",
+          "name": "Address Space Layout Randomization",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-EAL",
+          "name": "Executable Allowlisting",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-NI",
+          "name": "Network Isolation",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTPM",
+          "name": "Network Traffic Policy Mapping",
+          "tactic": "Model"
+        },
+        {
+          "id": "D3-PA",
+          "name": "Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-PHRA",
+          "name": "Process Hardware Resource Access",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-PSEP",
+          "name": "Process Segment Execution Prevention",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-SCP",
+          "name": "System Call Filtering",
+          "tactic": "Isolate"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "AU-Essential-8-App-Hardening",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "User application hardening"
+        },
+        {
+          "id": "AU-Essential-8-Backup",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Regular backups"
+        },
+        {
+          "id": "AU-Essential-8-Patch",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Patch operating systems"
+        },
+        {
+          "id": "AU-ISM-1556",
+          "framework": "au-ism",
+          "control_name": "Multi-factor authentication for privileged users (telecom NMS application)"
+        },
+        {
+          "id": "CIS-Controls-v8-Control7",
+          "framework": "CIS Controls v8",
+          "control_name": "Continuous Vulnerability Management"
+        },
+        {
+          "id": "IEC-62443-3-3",
+          "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
+          "control_name": "System security requirements and security levels"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.15",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Logging"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.21",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Security of network services"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.8",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Management of technical vulnerabilities"
+        },
+        {
+          "id": "NERC-CIP-007-6-R4",
+          "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
+          "control_name": "Security event monitoring"
+        },
+        {
+          "id": "NIS2-Art21-incident-handling",
+          "framework": "EU NIS2 Directive (2022/2555)",
+          "control_name": "Incident handling"
+        },
+        {
+          "id": "NIS2-Art21-network-security",
+          "framework": "EU NIS2 Directive (Directive (EU) 2022/2555)",
+          "control_name": "Security of network and information systems"
+        },
+        {
+          "id": "NIS2-Art21-patch-management",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Vulnerability handling and disclosure"
+        },
+        {
+          "id": "NIST-800-115",
+          "framework": "NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)",
+          "control_name": "Technical Guide to Information Security Testing and Assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Access Enforcement"
+        },
+        {
+          "id": "NIST-800-53-SC-8",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Transmission Confidentiality and Integrity"
+        },
+        {
+          "id": "NIST-800-53-SI-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Flaw Remediation"
+        },
+        {
+          "id": "NIST-800-53-SR-11",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Component Authenticity"
+        },
+        {
+          "id": "NIST-800-82r3",
+          "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
+          "control_name": "Guide to Operational Technology (OT) Security"
+        },
+        {
+          "id": "OWASP-Pen-Testing-Guide-v5",
+          "framework": "OWASP Web Security Testing Guide v5 (WSTG)",
+          "control_name": "Web application penetration testing methodology"
+        },
+        {
+          "id": "PCI-DSS-4.0-6.3.3",
+          "framework": "PCI DSS 4.0",
+          "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "PTES-Pre-engagement",
+          "framework": "Penetration Testing Execution Standard (PTES)",
+          "control_name": "Pre-engagement Interactions"
+        },
+        {
+          "id": "SOC2-CC7-anomaly-detection",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "SOC2-CC9-vendor-management",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-A1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Governance"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
+        {
+          "id": "UK-CAF-B4",
+          "framework": "UK NCSC Cyber Assessment Framework (CAF)",
+          "control_name": "System security"
+        },
+        {
+          "id": "UK-CAF-D1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Response and recovery planning"
+        }
+      ],
+      "attack_refs": [
+        "T0855",
+        "T0883",
+        "T1036",
+        "T1059",
+        "T1068",
+        "T1070",
+        "T1071.003",
+        "T1071.004",
+        "T1078",
+        "T1133",
+        "T1190",
+        "T1195.002",
+        "T1213",
+        "T1499",
+        "T1499.001",
+        "T1530",
+        "T1548.001",
+        "T1556",
+        "T1557",
+        "T1562.008",
+        "T1565.001",
+        "T1574"
+      ],
+      "rfc_refs": [
+        "CSAF-2.0",
+        "ISO-29147",
+        "ISO-30111",
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-7296",
+        "RFC-9116"
+      ]
+    }
+  },
   "CWE-20": {
     "name": "Improper Input Validation",
     "category": "Validation",
@@ -601399,9 +602391,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -602635,9 +603629,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -603739,7 +604735,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "CVE-2026-9198",
       "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
@@ -604833,7 +605831,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "CVE-2026-9198",
       "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
@@ -605942,7 +606942,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "CVE-2026-9198",
       "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
@@ -607777,8 +608779,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
       "MAL-2026-3083",
@@ -609099,9 +610103,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -610443,7 +611449,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -611403,8 +612411,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "MAL-2026-NODE-IPC-STEALER"
     ]
@@ -612852,7 +613862,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -614010,7 +615022,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -615457,9 +616471,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -616680,7 +617696,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -617577,9 +618595,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -618631,8 +619651,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
       "MAL-2026-3083",
@@ -619676,8 +620698,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
       "MAL-2026-3083",
@@ -620875,7 +621899,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -622012,9 +623038,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -624023,9 +625051,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -625306,7 +626336,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -626574,9 +627606,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -627858,7 +628892,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -628905,9 +629941,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -630975,9 +632013,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -632420,9 +633460,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -633433,7 +634475,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "CVE-2026-9198",
       "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
@@ -635749,8 +636793,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-9082",
       "CVE-2026-9198",
       "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
@@ -636972,7 +638018,9 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -639253,9 +640301,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -640207,8 +641257,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
+      "CVE-2026-8037",
       "CVE-2026-9082"
     ]
   },
@@ -641212,9 +642264,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -642418,9 +643472,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -643535,9 +644591,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -644755,9 +645813,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -645812,9 +646872,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -646960,9 +648022,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -647963,9 +649027,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -648965,9 +650031,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -649968,9 +651036,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -651340,9 +652410,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -652294,8 +653366,10 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
+      "CVE-2026-8037",
       "CVE-2026-9082"
     ]
   },
@@ -653269,9 +654343,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -654257,9 +655333,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",
@@ -655252,9 +656330,11 @@
       "CVE-2026-58644",
       "CVE-2026-60137",
       "CVE-2026-63030",
+      "CVE-2026-63077",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
+      "CVE-2026-8037",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "CVE-2026-9198",