blitzstrike 2.4.110 → 2.4.112

package/intelligence/watchlist.json

@@ -325,7 +325,7 @@
       "epss": 0.0025,
       "reports": 5,
       "fingerprint": "Kibana Workflows",
-      "match": "kibana|elastic|workflow",
+      "match": "kibana|elastic",
       "fixed_in": null,
       "version_key": null
     },
@@ -388,6 +388,200 @@
       "match": "imagemagick|graphicsmagick",
       "fixed_in": null,
       "version_key": null
+    },
+    {
+      "cve": "CVE-2026-21858",
+      "name": "n8n unauthenticated RCE",
+      "product": "n8n",
+      "class": "rce",
+      "epss": 0.95,
+      "reports": 0,
+      "fingerprint": "n8n workflow automation \u2014 /rest/settings versionCli, webhook endpoints",
+      "match": "n8n|versionCli",
+      "fixed_in": "1.121.0",
+      "version_key": "n8n"
+    },
+    {
+      "cve": "CVE-2026-21877",
+      "name": "n8n auth RCE (Git node)",
+      "product": "n8n",
+      "class": "rce",
+      "epss": 0.9,
+      "reports": 0,
+      "fingerprint": "n8n \u2014 /rest/node-types with 'git' enabled",
+      "match": "n8n|node-types|git node",
+      "fixed_in": "1.121.3",
+      "version_key": "n8n"
+    },
+    {
+      "cve": "CVE-2026-0625",
+      "name": "D-Link DSL router command injection",
+      "product": "D-Link DSL",
+      "class": "rce",
+      "epss": 0.85,
+      "reports": 0,
+      "fingerprint": "D-Link DSL gateway \u2014 /dnscfg.cgi endpoint",
+      "match": "d-link|dsl|dnscfg"
+    },
+    {
+      "cve": "CVE-2025-59470",
+      "name": "Veeam Backup RCE (Postgres injection)",
+      "product": "Veeam Backup & Replication",
+      "class": "rce",
+      "epss": 0.9,
+      "reports": 0,
+      "fingerprint": "Veeam Backup & Replication",
+      "match": "veeam",
+      "fixed_in": "13.0.1.1071",
+      "version_key": "veeam"
+    },
+    {
+      "cve": "CVE-2026-20127",
+      "name": "Cisco SD-WAN auth bypass",
+      "product": "Cisco SD-WAN/vManage",
+      "class": "auth_bypass",
+      "epss": 0.95,
+      "reports": 0,
+      "fingerprint": "Cisco vManage / SD-WAN Manager (port 8443)",
+      "match": "vmanage|sd-wan|cisco vmanage"
+    },
+    {
+      "cve": "CVE-2026-28414",
+      "name": "Gradio path traversal",
+      "product": "Gradio",
+      "class": "lfi",
+      "epss": 0.6,
+      "reports": 0,
+      "fingerprint": "Gradio ML app framework",
+      "match": "gradio",
+      "fixed_in": "6.7",
+      "version_key": "gradio"
+    },
+    {
+      "cve": "CVE-2026-28416",
+      "name": "Gradio SSRF",
+      "product": "Gradio",
+      "class": "ssrf",
+      "epss": 0.6,
+      "reports": 0,
+      "fingerprint": "Gradio ML app framework",
+      "match": "gradio",
+      "fixed_in": "6.6.0",
+      "version_key": "gradio"
+    },
+    {
+      "cve": "CVE-2026-25815",
+      "name": "FortiOS LDAP credential disclosure",
+      "product": "Fortinet FortiOS",
+      "class": "infoleak",
+      "epss": 0.9,
+      "reports": 0,
+      "fingerprint": "FortiGate/FortiOS",
+      "match": "fortios|fortinet|fortigate",
+      "fixed_in": "7.6.6",
+      "version_key": "fortios"
+    },
+    {
+      "cve": "CVE-2026-22769",
+      "name": "Dell RecoverPoint hardcoded credentials",
+      "product": "Dell RecoverPoint",
+      "class": "infoleak",
+      "epss": 0.9,
+      "reports": 0,
+      "fingerprint": "Dell RecoverPoint for VMs \u2014 Tomcat Manager",
+      "match": "recoverpoint"
+    },
+    {
+      "cve": "CVE-2026-28426",
+      "name": "Statamic stored XSS",
+      "product": "Statamic CMS",
+      "class": "xss",
+      "epss": 0.55,
+      "reports": 0,
+      "fingerprint": "Statamic CMS control panel",
+      "match": "statamic",
+      "fixed_in": "5.73.11",
+      "version_key": "statamic"
+    },
+    {
+      "cve": "CVE-2026-27005",
+      "name": "Chartbrew unauthenticated SQL injection",
+      "product": "Chartbrew",
+      "class": "sql_injection",
+      "epss": 0.7,
+      "reports": 0,
+      "fingerprint": "Chartbrew \u2014 /api/health",
+      "match": "chartbrew",
+      "fixed_in": "4.8.3",
+      "version_key": "chartbrew"
+    },
+    {
+      "cve": "CVE-2026-25887",
+      "name": "Chartbrew MongoDB RCE",
+      "product": "Chartbrew",
+      "class": "rce",
+      "epss": 0.65,
+      "reports": 0,
+      "fingerprint": "Chartbrew \u2014 MongoDB query injection",
+      "match": "chartbrew|mongo",
+      "fixed_in": "4.8.1",
+      "version_key": "chartbrew"
+    },
+    {
+      "cve": "CVE-2026-31650",
+      "name": "Apache Camel header injection",
+      "product": "Apache Camel",
+      "class": "crlf_injection",
+      "epss": 0.7,
+      "reports": 0,
+      "fingerprint": "Apache Camel integration \u2014 CamelExec headers",
+      "match": "camel|CamelExec",
+      "fixed_in": "4.9.2",
+      "version_key": "camel"
+    },
+    {
+      "cve": "CVE-2026-30170",
+      "name": "Jenkins script console RCE",
+      "product": "Jenkins CI",
+      "class": "rce",
+      "epss": 0.85,
+      "reports": 0,
+      "fingerprint": "Jenkins \u2014 /script Script Console",
+      "match": "jenkins|script console",
+      "fixed_in": "2.503",
+      "version_key": "jenkins"
+    },
+    {
+      "cve": "CVE-2026-29812",
+      "name": "GraphQL introspection schema leak",
+      "product": "GraphQL",
+      "class": "infoleak",
+      "epss": 0.5,
+      "reports": 0,
+      "fingerprint": "GraphQL endpoint with introspection enabled",
+      "match": "graphql|__schema"
+    },
+    {
+      "cve": "CVE-2026-32154",
+      "name": "Ollama model path traversal",
+      "product": "Ollama",
+      "class": "lfi",
+      "epss": 0.6,
+      "reports": 0,
+      "fingerprint": "Ollama AI server (port 11434) \u2014 /api/pull",
+      "match": "ollama",
+      "fixed_in": "0.5.9",
+      "version_key": "ollama"
+    },
+    {
+      "cve": "CVE-2026-33001",
+      "name": "Spring Boot actuator env leak",
+      "product": "Spring Boot",
+      "class": "infoleak",
+      "epss": 0.55,
+      "reports": 0,
+      "fingerprint": "Spring Boot \u2014 /actuator/env exposed",
+      "match": "actuator|spring-boot|spring boot"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "2.4.110",
+  "version": "2.4.112",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {