{
  "schemaVersion": 1,
  "site": "https://cveboard.org",
  "generatedAt": "2026-10-24T05:27:55.596Z",
  "filters": {
    "kind": null,
    "exploited": false,
    "severity": null,
    "ecosystems": [],
    "tag": null
  },
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "cursor": 252,
  "more": false,
  "next": "https://cveboard.org/changes.json?after=252",
  "changes": [
    {
      "seq": 252,
      "id": "cvenow:CVE-2026-115806:cvenow_discovered:first",
      "incidentId": "cve-2026-115806",
      "type": "cvenow_discovered",
      "at": "2026-10-24T04:32:10.565Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115806",
      "json": "https://cveboard.org/i/cve-2026-115806.json",
      "incident": {
        "title": "CVE-2026-115806",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 251,
      "id": "cvenow:CVE-2026-114612:cvenow_discovered:first",
      "incidentId": "cve-2026-114612",
      "type": "cvenow_discovered",
      "at": "2026-10-22T18:01:52.768Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114612",
      "json": "https://cveboard.org/i/cve-2026-114612.json",
      "incident": {
        "title": "CVE-2026-114612",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 250,
      "id": "cvenow:CVE-2026-114611:cvenow_discovered:first",
      "incidentId": "cve-2026-114611",
      "type": "cvenow_discovered",
      "at": "2026-10-22T17:33:13.611Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114611",
      "json": "https://cveboard.org/i/cve-2026-114611.json",
      "incident": {
        "title": "CVE-2026-114611",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 249,
      "id": "cvenow:CVE-2026-114607:cvenow_discovered:first",
      "incidentId": "cve-2026-114607",
      "type": "cvenow_discovered",
      "at": "2026-10-22T16:47:27.480Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114607",
      "json": "https://cveboard.org/i/cve-2026-114607.json",
      "incident": {
        "title": "CVE-2026-114607",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 248,
      "id": "cvenow:CVE-2026-97631:cvenow_discovered:first",
      "incidentId": "cve-2026-97631",
      "type": "cvenow_discovered",
      "at": "2026-10-22T16:32:27.619Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-97631",
      "json": "https://cveboard.org/i/cve-2026-97631.json",
      "incident": {
        "title": "CVE-2026-97631",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 247,
      "id": "cvenow:CVE-2026-111497:cvenow_discovered:first",
      "incidentId": "cve-2026-111497",
      "type": "cvenow_discovered",
      "at": "2026-10-22T13:35:41.975Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-111497",
      "json": "https://cveboard.org/i/cve-2026-111497.json",
      "incident": {
        "title": "CVE-2026-111497",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 246,
      "id": "cvenow:CVE-2026-102785:cvenow_discovered:first",
      "incidentId": "cve-2026-102785",
      "type": "cvenow_discovered",
      "at": "2026-10-22T12:36:43.196Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-102785",
      "json": "https://cveboard.org/i/cve-2026-102785.json",
      "incident": {
        "title": "CVE-2026-102785",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 245,
      "id": "cvenow:CVE-2026-112832:cvenow_discovered:first",
      "incidentId": "cve-2026-112832",
      "type": "cvenow_discovered",
      "at": "2026-10-22T11:00:11.107Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112832",
      "json": "https://cveboard.org/i/cve-2026-112832.json",
      "incident": {
        "title": "CVE-2026-112832",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 244,
      "id": "cvenow:CVE-2021-48016:cvenow_discovered:first",
      "incidentId": "cve-2021-48016",
      "type": "cvenow_discovered",
      "at": "2026-10-22T10:57:31.176Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2021-48016",
      "json": "https://cveboard.org/i/cve-2021-48016.json",
      "incident": {
        "title": "CVE-2021-48016",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 243,
      "id": "cvenow:CVE-2021-48014:cvenow_discovered:first",
      "incidentId": "cve-2021-48014",
      "type": "cvenow_discovered",
      "at": "2026-10-22T10:57:29.782Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2021-48014",
      "json": "https://cveboard.org/i/cve-2021-48014.json",
      "incident": {
        "title": "CVE-2021-48014",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 242,
      "id": "cvenow:CVE-2026-112241:cvenow_discovered:first",
      "incidentId": "cve-2026-112241",
      "type": "cvenow_discovered",
      "at": "2026-10-22T08:00:49.628Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112241",
      "json": "https://cveboard.org/i/cve-2026-112241.json",
      "incident": {
        "title": "CVE-2026-112241",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 241,
      "id": "cvenow:CVE-2026-112327:cvenow_discovered:first",
      "incidentId": "cve-2026-112327",
      "type": "cvenow_discovered",
      "at": "2026-10-22T07:01:09.933Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112327",
      "json": "https://cveboard.org/i/cve-2026-112327.json",
      "incident": {
        "title": "CVE-2026-112327",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 240,
      "id": "cvenow:CVE-2026-114220:cvenow_discovered:first",
      "incidentId": "cve-2026-114220",
      "type": "cvenow_discovered",
      "at": "2026-10-22T04:26:20.542Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114220",
      "json": "https://cveboard.org/i/cve-2026-114220.json",
      "incident": {
        "title": "CVE-2026-114220",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 239,
      "id": "cvenow:CVE-2026-114219:cvenow_discovered:first",
      "incidentId": "cve-2026-114219",
      "type": "cvenow_discovered",
      "at": "2026-10-22T04:25:41.557Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114219",
      "json": "https://cveboard.org/i/cve-2026-114219.json",
      "incident": {
        "title": "CVE-2026-114219",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 238,
      "id": "cvenow:CVE-2026-114661:cvenow_discovered:first",
      "incidentId": "cve-2026-114661",
      "type": "cvenow_discovered",
      "at": "2026-10-22T01:43:45.515Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114661",
      "json": "https://cveboard.org/i/cve-2026-114661.json",
      "incident": {
        "title": "CVE-2026-114661",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 237,
      "id": "cvenow:CVE-2026-96355:cvenow_discovered:first",
      "incidentId": "cve-2026-96355",
      "type": "cvenow_discovered",
      "at": "2026-10-22T01:21:33.082Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-96355",
      "json": "https://cveboard.org/i/cve-2026-96355.json",
      "incident": {
        "title": "CVE-2026-96355",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 236,
      "id": "cvenow:CVE-2026-114575:cvenow_discovered:first",
      "incidentId": "cve-2026-114575",
      "type": "cvenow_discovered",
      "at": "2026-10-22T01:00:21.351Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-114575",
      "json": "https://cveboard.org/i/cve-2026-114575.json",
      "incident": {
        "title": "CVE-2026-114575",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 235,
      "id": "cvenow:CVE-2026-110264:cvenow_discovered:first",
      "incidentId": "cve-2026-110264",
      "type": "cvenow_discovered",
      "at": "2026-10-22T00:33:48.179Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-110264",
      "json": "https://cveboard.org/i/cve-2026-110264.json",
      "incident": {
        "title": "CVE-2026-110264",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 234,
      "id": "cvenow:CVE-2026-76531:cvenow_discovered:first",
      "incidentId": "cve-2026-76531",
      "type": "cvenow_discovered",
      "at": "2026-10-21T22:52:20.059Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-76531",
      "json": "https://cveboard.org/i/cve-2026-76531.json",
      "incident": {
        "title": "CVE-2026-76531",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 233,
      "id": "cvenow:CVE-2026-76302:cvenow_discovered:first",
      "incidentId": "cve-2026-76302",
      "type": "cvenow_discovered",
      "at": "2026-10-21T22:52:03.886Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-76302",
      "json": "https://cveboard.org/i/cve-2026-76302.json",
      "incident": {
        "title": "CVE-2026-76302",
        "kind": "vuln",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 232,
      "id": "cvenow:CVE-2026-79864:cvenow_discovered:first",
      "incidentId": "cve-2026-79864",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:22.080Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79864",
      "json": "https://cveboard.org/i/cve-2026-79864.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 231,
      "id": "cvenow:CVE-2026-79863:cvenow_discovered:first",
      "incidentId": "cve-2026-79863",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:20.425Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79863",
      "json": "https://cveboard.org/i/cve-2026-79863.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 230,
      "id": "cvenow:CVE-2026-79862:cvenow_discovered:first",
      "incidentId": "cve-2026-79862",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:18.613Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79862",
      "json": "https://cveboard.org/i/cve-2026-79862.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 229,
      "id": "cvenow:CVE-2026-79861:cvenow_discovered:first",
      "incidentId": "cve-2026-79861",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:17.012Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79861",
      "json": "https://cveboard.org/i/cve-2026-79861.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 228,
      "id": "cvenow:CVE-2026-79860:cvenow_discovered:first",
      "incidentId": "cve-2026-79860",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:10.749Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79860",
      "json": "https://cveboard.org/i/cve-2026-79860.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 227,
      "id": "cvenow:CVE-2026-79859:cvenow_discovered:first",
      "incidentId": "cve-2026-79859",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:09.507Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79859",
      "json": "https://cveboard.org/i/cve-2026-79859.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 226,
      "id": "cvenow:CVE-2026-79858:cvenow_discovered:first",
      "incidentId": "cve-2026-79858",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:08.166Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79858",
      "json": "https://cveboard.org/i/cve-2026-79858.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 225,
      "id": "cvenow:CVE-2026-79857:cvenow_discovered:first",
      "incidentId": "cve-2026-79857",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:06.618Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79857",
      "json": "https://cveboard.org/i/cve-2026-79857.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 224,
      "id": "cvenow:CVE-2026-79856:cvenow_discovered:first",
      "incidentId": "cve-2026-79856",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:05.250Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79856",
      "json": "https://cveboard.org/i/cve-2026-79856.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 223,
      "id": "cvenow:CVE-2026-79855:cvenow_discovered:first",
      "incidentId": "cve-2026-79855",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:03.382Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79855",
      "json": "https://cveboard.org/i/cve-2026-79855.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 222,
      "id": "cvenow:CVE-2026-79854:cvenow_discovered:first",
      "incidentId": "cve-2026-79854",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:02.138Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79854",
      "json": "https://cveboard.org/i/cve-2026-79854.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 221,
      "id": "cvenow:CVE-2026-79853:cvenow_discovered:first",
      "incidentId": "cve-2026-79853",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:00.903Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79853",
      "json": "https://cveboard.org/i/cve-2026-79853.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 220,
      "id": "cvenow:CVE-2026-79852:cvenow_discovered:first",
      "incidentId": "cve-2026-79852",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:59.570Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79852",
      "json": "https://cveboard.org/i/cve-2026-79852.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 219,
      "id": "cvenow:CVE-2026-79851:cvenow_discovered:first",
      "incidentId": "cve-2026-79851",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:58.382Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79851",
      "json": "https://cveboard.org/i/cve-2026-79851.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 218,
      "id": "cvenow:CVE-2026-79850:cvenow_discovered:first",
      "incidentId": "cve-2026-79850",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:57.112Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79850",
      "json": "https://cveboard.org/i/cve-2026-79850.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 217,
      "id": "cvenow:CVE-2026-79849:cvenow_discovered:first",
      "incidentId": "cve-2026-79849",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:55.951Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79849",
      "json": "https://cveboard.org/i/cve-2026-79849.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 216,
      "id": "cvenow:CVE-2026-79848:cvenow_discovered:first",
      "incidentId": "cve-2026-79848",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:54.781Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79848",
      "json": "https://cveboard.org/i/cve-2026-79848.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 215,
      "id": "cvenow:CVE-2026-79847:cvenow_discovered:first",
      "incidentId": "cve-2026-79847",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:53.557Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79847",
      "json": "https://cveboard.org/i/cve-2026-79847.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 214,
      "id": "cvenow:CVE-2026-79846:cvenow_discovered:first",
      "incidentId": "cve-2026-79846",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:47.248Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79846",
      "json": "https://cveboard.org/i/cve-2026-79846.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 213,
      "id": "cvenow:CVE-2026-79844:cvenow_discovered:first",
      "incidentId": "cve-2026-79844",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:04:44.829Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79844",
      "json": "https://cveboard.org/i/cve-2026-79844.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 212,
      "id": "cvenow:CVE-2026-97785:cvenow_discovered:first",
      "incidentId": "cve-2026-97785",
      "type": "cvenow_discovered",
      "at": "2026-10-22T21:44:41.227Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-97785",
      "json": "https://cveboard.org/i/cve-2026-97785.json",
      "incident": {
        "title": "Microsoft Microsoft Entra application proxy",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 211,
      "id": "cvenow:CVE-2026-105014:cvenow_discovered:first",
      "incidentId": "cve-2026-105014",
      "type": "cvenow_discovered",
      "at": "2026-10-22T21:44:40.069Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-105014",
      "json": "https://cveboard.org/i/cve-2026-105014.json",
      "incident": {
        "title": "Microsoft Azure Pipelines",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 210,
      "id": "cvenow:CVE-2026-115384:cvenow_discovered:first",
      "incidentId": "cve-2026-115384",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:13:51.422Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115384",
      "json": "https://cveboard.org/i/cve-2026-115384.json",
      "incident": {
        "title": "bytecodealliance wasmtime",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 209,
      "id": "cvenow:CVE-2026-115377:cvenow_discovered:first",
      "incidentId": "cve-2026-115377",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:13:46.305Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115377",
      "json": "https://cveboard.org/i/cve-2026-115377.json",
      "incident": {
        "title": "lxc incus",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 208,
      "id": "cvenow:CVE-2026-115375:cvenow_discovered:first",
      "incidentId": "cve-2026-115375",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:13:44.760Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115375",
      "json": "https://cveboard.org/i/cve-2026-115375.json",
      "incident": {
        "title": "lxc incus",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 207,
      "id": "cvenow:CVE-2026-115372:cvenow_discovered:first",
      "incidentId": "cve-2026-115372",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:13:42.624Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115372",
      "json": "https://cveboard.org/i/cve-2026-115372.json",
      "incident": {
        "title": "lxc incus",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 206,
      "id": "cvenow:CVE-2026-115353:cvenow_discovered:first",
      "incidentId": "cve-2026-115353",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:13:30.422Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115353",
      "json": "https://cveboard.org/i/cve-2026-115353.json",
      "incident": {
        "title": "lepture mistune",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 205,
      "id": "cvenow:CVE-2022-51026:cvenow_discovered:first",
      "incidentId": "cve-2022-51026",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:13:18.259Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2022-51026",
      "json": "https://cveboard.org/i/cve-2022-51026.json",
      "incident": {
        "title": "bytebase bytebase",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 204,
      "id": "cvenow:CVE-2026-79876:cvenow_discovered:first",
      "incidentId": "cve-2026-79876",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:45.563Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79876",
      "json": "https://cveboard.org/i/cve-2026-79876.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 203,
      "id": "cvenow:CVE-2026-79875:cvenow_discovered:first",
      "incidentId": "cve-2026-79875",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:43.906Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79875",
      "json": "https://cveboard.org/i/cve-2026-79875.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 202,
      "id": "cvenow:CVE-2026-79874:cvenow_discovered:first",
      "incidentId": "cve-2026-79874",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:37.688Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79874",
      "json": "https://cveboard.org/i/cve-2026-79874.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 201,
      "id": "cvenow:CVE-2026-79873:cvenow_discovered:first",
      "incidentId": "cve-2026-79873",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:36.541Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79873",
      "json": "https://cveboard.org/i/cve-2026-79873.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 200,
      "id": "cvenow:CVE-2026-79872:cvenow_discovered:first",
      "incidentId": "cve-2026-79872",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:35.350Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79872",
      "json": "https://cveboard.org/i/cve-2026-79872.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 199,
      "id": "cvenow:CVE-2026-79871:cvenow_discovered:first",
      "incidentId": "cve-2026-79871",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:34.042Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79871",
      "json": "https://cveboard.org/i/cve-2026-79871.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 198,
      "id": "cvenow:CVE-2026-79870:cvenow_discovered:first",
      "incidentId": "cve-2026-79870",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:32.328Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79870",
      "json": "https://cveboard.org/i/cve-2026-79870.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 197,
      "id": "cvenow:CVE-2026-79869:cvenow_discovered:first",
      "incidentId": "cve-2026-79869",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:30.299Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79869",
      "json": "https://cveboard.org/i/cve-2026-79869.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 196,
      "id": "cvenow:CVE-2026-79868:cvenow_discovered:first",
      "incidentId": "cve-2026-79868",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:28.687Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79868",
      "json": "https://cveboard.org/i/cve-2026-79868.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 195,
      "id": "cvenow:CVE-2026-79867:cvenow_discovered:first",
      "incidentId": "cve-2026-79867",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:26.627Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79867",
      "json": "https://cveboard.org/i/cve-2026-79867.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 194,
      "id": "cvenow:CVE-2026-79866:cvenow_discovered:first",
      "incidentId": "cve-2026-79866",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:24.966Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79866",
      "json": "https://cveboard.org/i/cve-2026-79866.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 193,
      "id": "cvenow:CVE-2026-79865:cvenow_discovered:first",
      "incidentId": "cve-2026-79865",
      "type": "cvenow_discovered",
      "at": "2026-10-22T19:05:23.329Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-79865",
      "json": "https://cveboard.org/i/cve-2026-79865.json",
      "incident": {
        "title": "Hewlett Packard Enterprise (HPE) ArubaOS (AOS)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 192,
      "id": "cvenow:CVE-2026-115727:cvenow_discovered:first",
      "incidentId": "cve-2026-115727",
      "type": "cvenow_discovered",
      "at": "2026-10-23T11:36:49.751Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115727",
      "json": "https://cveboard.org/i/cve-2026-115727.json",
      "incident": {
        "title": "Fosowl AgenticSeek",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 191,
      "id": "cvenow:CVE-2026-107685:cvenow_discovered:first",
      "incidentId": "cve-2026-107685",
      "type": "cvenow_discovered",
      "at": "2026-10-23T11:00:38.975Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-107685",
      "json": "https://cveboard.org/i/cve-2026-107685.json",
      "incident": {
        "title": "agentjido req_llm",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 190,
      "id": "cvenow:CVE-2026-25784:cvenow_discovered:first",
      "incidentId": "cve-2026-25784",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:54:57.880Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-25784",
      "json": "https://cveboard.org/i/cve-2026-25784.json",
      "incident": {
        "title": "Hallo Welt! GmbH BlueSpice",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 189,
      "id": "cvenow:CVE-2025-30054:cvenow_discovered:first",
      "incidentId": "cve-2025-30054",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:22:59.749Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2025-30054",
      "json": "https://cveboard.org/i/cve-2025-30054.json",
      "incident": {
        "title": "CGM CGM CLININET",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 188,
      "id": "cvenow:CVE-2025-30050:cvenow_discovered:first",
      "incidentId": "cve-2025-30050",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:22:57.175Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2025-30050",
      "json": "https://cveboard.org/i/cve-2025-30050.json",
      "incident": {
        "title": "CGM CGM CLININET",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 187,
      "id": "cvenow:CVE-2025-30047:cvenow_discovered:first",
      "incidentId": "cve-2025-30047",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:22:55.856Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2025-30047",
      "json": "https://cveboard.org/i/cve-2025-30047.json",
      "incident": {
        "title": "CGM CGM CLININET",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 186,
      "id": "cvenow:CVE-2025-30046:cvenow_discovered:first",
      "incidentId": "cve-2025-30046",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:22:55.246Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2025-30046",
      "json": "https://cveboard.org/i/cve-2025-30046.json",
      "incident": {
        "title": "CGM CGM CLININET",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 185,
      "id": "cvenow:CVE-2026-112860:cvenow_discovered:first",
      "incidentId": "cve-2026-112860",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:00:11.265Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112860",
      "json": "https://cveboard.org/i/cve-2026-112860.json",
      "incident": {
        "title": "xnau webdesign Participants Database",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 184,
      "id": "cvenow:CVE-2026-112862:cvenow_discovered:first",
      "incidentId": "cve-2026-112862",
      "type": "cvenow_discovered",
      "at": "2026-10-23T08:00:11.165Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112862",
      "json": "https://cveboard.org/i/cve-2026-112862.json",
      "incident": {
        "title": "xnau webdesign Participants Database",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 183,
      "id": "cvenow:CVE-2026-63244:cvenow_discovered:first",
      "incidentId": "cve-2026-63244",
      "type": "cvenow_discovered",
      "at": "2026-10-23T07:24:30.089Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-63244",
      "json": "https://cveboard.org/i/cve-2026-63244.json",
      "incident": {
        "title": "CVE-2026-63244",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 182,
      "id": "cvenow:CVE-2026-55981:cvenow_discovered:first",
      "incidentId": "cve-2026-55981",
      "type": "cvenow_discovered",
      "at": "2026-10-23T06:47:05.745Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-55981",
      "json": "https://cveboard.org/i/cve-2026-55981.json",
      "incident": {
        "title": "Creative Labs Creative Sound Blaster Katana V2, V2X, SE",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 181,
      "id": "cvenow:CVE-2026-94267:cvenow_discovered:first",
      "incidentId": "cve-2026-94267",
      "type": "cvenow_discovered",
      "at": "2026-10-23T06:00:21.241Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-94267",
      "json": "https://cveboard.org/i/cve-2026-94267.json",
      "incident": {
        "title": "CVE-2026-94267",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 180,
      "id": "cvenow:CVE-2026-54630:cvenow_discovered:first",
      "incidentId": "cve-2026-54630",
      "type": "cvenow_discovered",
      "at": "2026-10-23T03:48:59.951Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-54630",
      "json": "https://cveboard.org/i/cve-2026-54630.json",
      "incident": {
        "title": "Part-DB Part-DB-server",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 179,
      "id": "cvenow:CVE-2026-115547:cvenow_discovered:first",
      "incidentId": "cve-2026-115547",
      "type": "cvenow_discovered",
      "at": "2026-10-23T03:06:45.274Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115547",
      "json": "https://cveboard.org/i/cve-2026-115547.json",
      "incident": {
        "title": "Okta Okta Access Gateway",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 178,
      "id": "cvenow:CVE-2026-19677:cvenow_discovered:first",
      "incidentId": "cve-2026-19677",
      "type": "cvenow_discovered",
      "at": "2026-10-23T01:21:08.272Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-19677",
      "json": "https://cveboard.org/i/cve-2026-19677.json",
      "incident": {
        "title": "onPhase onPhase Forms",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 177,
      "id": "cvenow:CVE-2026-110243:cvenow_discovered:first",
      "incidentId": "cve-2026-110243",
      "type": "cvenow_discovered",
      "at": "2026-10-22T22:06:36.699Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-110243",
      "json": "https://cveboard.org/i/cve-2026-110243.json",
      "incident": {
        "title": "Kiloview E3 Firmware",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 176,
      "id": "cvenow:CVE-2026-107861:cvenow_discovered:first",
      "incidentId": "cve-2026-107861",
      "type": "cvenow_discovered",
      "at": "2026-10-22T22:04:32.969Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-107861",
      "json": "https://cveboard.org/i/cve-2026-107861.json",
      "incident": {
        "title": "Kiloview E3 Firmware",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 175,
      "id": "cvenow:CVE-2026-109122:cvenow_discovered:first",
      "incidentId": "cve-2026-109122",
      "type": "cvenow_discovered",
      "at": "2026-10-22T21:50:47.777Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-109122",
      "json": "https://cveboard.org/i/cve-2026-109122.json",
      "incident": {
        "title": "Kiloview E3 Firmware",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 174,
      "id": "cvenow:CVE-2026-110063:cvenow_discovered:first",
      "incidentId": "cve-2026-110063",
      "type": "cvenow_discovered",
      "at": "2026-10-22T21:44:42.868Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-110063",
      "json": "https://cveboard.org/i/cve-2026-110063.json",
      "incident": {
        "title": "Microsoft VM Inspector for Azure Virtual Machines",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 173,
      "id": "cvenow:CVE-2026-83938:cvenow_discovered:first",
      "incidentId": "cve-2026-83938",
      "type": "cvenow_discovered",
      "at": "2026-10-22T21:44:42.272Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-83938",
      "json": "https://cveboard.org/i/cve-2026-83938.json",
      "incident": {
        "title": "Microsoft Azure Kubernetes Configuration Service",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 172,
      "id": "cvenow:CVE-2026-115931:cvenow_discovered:first",
      "incidentId": "cve-2026-115931",
      "type": "cvenow_discovered",
      "at": "2026-10-23T22:02:21.717Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115931",
      "json": "https://cveboard.org/i/cve-2026-115931.json",
      "incident": {
        "title": "GitroomHQ postiz-app",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 171,
      "id": "cvenow:CVE-2026-115893:cvenow_discovered:first",
      "incidentId": "cve-2026-115893",
      "type": "cvenow_discovered",
      "at": "2026-10-23T21:29:33.917Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115893",
      "json": "https://cveboard.org/i/cve-2026-115893.json",
      "incident": {
        "title": "bytecodealliance wasmtime",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 170,
      "id": "cvenow:CVE-2026-115812:cvenow_discovered:first",
      "incidentId": "cve-2026-115812",
      "type": "cvenow_discovered",
      "at": "2026-10-23T17:33:53.542Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-115812",
      "json": "https://cveboard.org/i/cve-2026-115812.json",
      "incident": {
        "title": "AWS multi-model-server",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 169,
      "id": "cvenow:CVE-2026-53942:cvenow_discovered:first",
      "incidentId": "cve-2026-53942",
      "type": "cvenow_discovered",
      "at": "2026-10-23T14:25:00.085Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-53942",
      "json": "https://cveboard.org/i/cve-2026-53942.json",
      "incident": {
        "title": "conda infrastructure",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 168,
      "id": "cvenow:CVE-2026-55486:cvenow_discovered:first",
      "incidentId": "cve-2026-55486",
      "type": "cvenow_discovered",
      "at": "2026-10-23T14:17:42.732Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-55486",
      "json": "https://cveboard.org/i/cve-2026-55486.json",
      "incident": {
        "title": "intranda goobi-viewer-core",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 167,
      "id": "cvenow:CVE-2026-46652:cvenow_discovered:first",
      "incidentId": "cve-2026-46652",
      "type": "cvenow_discovered",
      "at": "2026-10-23T14:15:46.415Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-46652",
      "json": "https://cveboard.org/i/cve-2026-46652.json",
      "incident": {
        "title": "intranda goobi-viewer-core",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 166,
      "id": "cvenow:CVE-2026-46651:cvenow_discovered:first",
      "incidentId": "cve-2026-46651",
      "type": "cvenow_discovered",
      "at": "2026-10-23T14:15:28.088Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-46651",
      "json": "https://cveboard.org/i/cve-2026-46651.json",
      "incident": {
        "title": "intranda goobi-viewer-core",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 165,
      "id": "cvenow:CVE-2026-53921:cvenow_discovered:first",
      "incidentId": "cve-2026-53921",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:20:30.249Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-53921",
      "json": "https://cveboard.org/i/cve-2026-53921.json",
      "incident": {
        "title": "openwrt odhcpd",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 164,
      "id": "cvenow:CVE-2026-112848:cvenow_discovered:first",
      "incidentId": "cve-2026-112848",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:20.030Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112848",
      "json": "https://cveboard.org/i/cve-2026-112848.json",
      "incident": {
        "title": "AivahThemes Hostme v2",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 163,
      "id": "cvenow:CVE-2026-112854:cvenow_discovered:first",
      "incidentId": "cve-2026-112854",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:19.251Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112854",
      "json": "https://cveboard.org/i/cve-2026-112854.json",
      "incident": {
        "title": "axiomthemes Holistic Center",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 162,
      "id": "cvenow:CVE-2026-112847:cvenow_discovered:first",
      "incidentId": "cve-2026-112847",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:19.203Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112847",
      "json": "https://cveboard.org/i/cve-2026-112847.json",
      "incident": {
        "title": "ThemeREX ZenSoul",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 161,
      "id": "cvenow:CVE-2026-112846:cvenow_discovered:first",
      "incidentId": "cve-2026-112846",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:18.841Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112846",
      "json": "https://cveboard.org/i/cve-2026-112846.json",
      "incident": {
        "title": "ThemeREX Group Save Life",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 160,
      "id": "cvenow:CVE-2026-112851:cvenow_discovered:first",
      "incidentId": "cve-2026-112851",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:18.778Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112851",
      "json": "https://cveboard.org/i/cve-2026-112851.json",
      "incident": {
        "title": "ThemeREX Group HotLock",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 159,
      "id": "cvenow:CVE-2026-112853:cvenow_discovered:first",
      "incidentId": "cve-2026-112853",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:18.338Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112853",
      "json": "https://cveboard.org/i/cve-2026-112853.json",
      "incident": {
        "title": "axiomthemes Hallelujah",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 158,
      "id": "cvenow:CVE-2026-112856:cvenow_discovered:first",
      "incidentId": "cve-2026-112856",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:17.961Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112856",
      "json": "https://cveboard.org/i/cve-2026-112856.json",
      "incident": {
        "title": "ThemeREX Group Vagabonds",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 157,
      "id": "cvenow:CVE-2026-112857:cvenow_discovered:first",
      "incidentId": "cve-2026-112857",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:17.920Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112857",
      "json": "https://cveboard.org/i/cve-2026-112857.json",
      "incident": {
        "title": "axiomthemes Reprizo",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 156,
      "id": "cvenow:CVE-2026-112858:cvenow_discovered:first",
      "incidentId": "cve-2026-112858",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:17.505Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112858",
      "json": "https://cveboard.org/i/cve-2026-112858.json",
      "incident": {
        "title": "axiomthemes Rhodos",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 155,
      "id": "cvenow:CVE-2026-112859:cvenow_discovered:first",
      "incidentId": "cve-2026-112859",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:17.469Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112859",
      "json": "https://cveboard.org/i/cve-2026-112859.json",
      "incident": {
        "title": "ThemeREX Group Little Birdies",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 154,
      "id": "cvenow:CVE-2026-112855:cvenow_discovered:first",
      "incidentId": "cve-2026-112855",
      "type": "cvenow_discovered",
      "at": "2026-10-23T13:00:16.938Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-112855",
      "json": "https://cveboard.org/i/cve-2026-112855.json",
      "incident": {
        "title": "axiomthemes Redy",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 153,
      "id": "cvenow:CVE-2026-57116:cvenow_discovered:first",
      "incidentId": "cve-2026-57116",
      "type": "cvenow_discovered",
      "at": "2026-10-23T12:06:55.544Z",
      "text": {
        "en": "First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.",
        "pt": "Listada como crítica pelo cve.now. Versões afetadas e corrigidas vêm do registro CVE, quando for publicado."
      },
      "url": "https://cveboard.org/i/cve-2026-57116",
      "json": "https://cveboard.org/i/cve-2026-57116.json",
      "incident": {
        "title": "MervinPraison PraisonAI",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 152,
      "id": "ghsa:GHSA-897f-g5gm-fmxm:ghsa_published:2026-10-23T22:02:20.000Z",
      "incidentId": "cve-2026-115889",
      "type": "ghsa_published",
      "at": "2026-10-23T22:02:20.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-897f-g5gm-fmxm (critical). Fixed in 36.0.19, 43.0.0.",
        "pt": "O GitHub publicou o alerta GHSA-897f-g5gm-fmxm (crítica). Corrigido em 36.0.19, 43.0.0."
      },
      "url": "https://cveboard.org/i/cve-2026-115889",
      "json": "https://cveboard.org/i/cve-2026-115889.json",
      "incident": {
        "title": "Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 151,
      "id": "ghsa:GHSA-5x8w-8jj5-q52h:ghsa_published:2026-10-23T21:55:21.000Z",
      "incidentId": "cve-2026-112398",
      "type": "ghsa_published",
      "at": "2026-10-23T21:55:21.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-5x8w-8jj5-q52h (critical). Fixed in 13.0.0.",
        "pt": "O GitHub publicou o alerta GHSA-5x8w-8jj5-q52h (crítica). Corrigido em 13.0.0."
      },
      "url": "https://cveboard.org/i/cve-2026-112398",
      "json": "https://cveboard.org/i/cve-2026-112398.json",
      "incident": {
        "title": "Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 150,
      "id": "ghsa:GHSA-f9x3-7vq9-cph6:ghsa_published:2026-10-23T21:50:27.000Z",
      "incidentId": "cve-2026-114509",
      "type": "ghsa_published",
      "at": "2026-10-23T21:50:27.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-f9x3-7vq9-cph6 (critical). Fixed in 13.29.0, 12.68.0.",
        "pt": "O GitHub publicou o alerta GHSA-f9x3-7vq9-cph6 (crítica). Corrigido em 13.29.0, 12.68.0."
      },
      "url": "https://cveboard.org/i/cve-2026-114509",
      "json": "https://cveboard.org/i/cve-2026-114509.json",
      "incident": {
        "title": "Laravel TokenGuard authentication bypass through non-string API credentials",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 149,
      "id": "ghsa:GHSA-cxf3-9h37-7rr8:ghsa_published:2026-10-23T20:49:37.000Z",
      "incidentId": "ghsa-cxf3-9h37-7rr8",
      "type": "ghsa_published",
      "at": "2026-10-23T20:49:37.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-cxf3-9h37-7rr8 (critical). Fixed in 4.16.1, 5.4.1.",
        "pt": "O GitHub publicou o alerta GHSA-cxf3-9h37-7rr8 (crítica). Corrigido em 4.16.1, 5.4.1."
      },
      "url": "https://cveboard.org/i/ghsa-cxf3-9h37-7rr8",
      "json": "https://cveboard.org/i/ghsa-cxf3-9h37-7rr8.json",
      "incident": {
        "title": "Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 148,
      "id": "ghsa:GHSA-7587-9684-52r6:ghsa_published:2026-10-22T12:31:17.000Z",
      "incidentId": "cve-2026-115324",
      "type": "ghsa_published",
      "at": "2026-10-22T12:31:17.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-7587-9684-52r6 (critical). Fixed in 1.0.8.",
        "pt": "O GitHub publicou o alerta GHSA-7587-9684-52r6 (crítica). Corrigido em 1.0.8."
      },
      "url": "https://cveboard.org/i/cve-2026-115324",
      "json": "https://cveboard.org/i/cve-2026-115324.json",
      "incident": {
        "title": "mem0ai Databricks vector store vulnerable to SQL injection",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 147,
      "id": "kev:CVE-2026-110447:kev_added:2026-10-23T00:00:00.000Z",
      "incidentId": "cve-2026-110447",
      "type": "kev_added",
      "at": "2026-10-23T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-26.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-26."
      },
      "url": "https://cveboard.org/i/cve-2026-110447",
      "json": "https://cveboard.org/i/cve-2026-110447.json",
      "incident": {
        "title": "Collabora Online – Built-in CODE Server OS Command Injection Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 146,
      "id": "ghsa:GHSA-9v8h-qqgm-4m35:ghsa_published:2026-10-22T15:32:49.000Z",
      "incidentId": "ghsa-9v8h-qqgm-4m35",
      "type": "ghsa_published",
      "at": "2026-10-22T15:32:49.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-9v8h-qqgm-4m35 (critical). Fixed in 1.2.1, 1.2.1.0.",
        "pt": "O GitHub publicou o alerta GHSA-9v8h-qqgm-4m35 (crítica). Corrigido em 1.2.1, 1.2.1.0."
      },
      "url": "https://cveboard.org/i/ghsa-9v8h-qqgm-4m35",
      "json": "https://cveboard.org/i/ghsa-9v8h-qqgm-4m35.json",
      "incident": {
        "title": "Brotli: Out-of-bounds write in the Brotli decoder (\"Node2Shell\") also affects the PyPI Brotli package",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 145,
      "id": "ghsa:GHSA-pqh8-4pj7-32xx:ghsa_published:2026-10-23T18:29:02.000Z",
      "incidentId": "cve-2026-77363",
      "type": "ghsa_published",
      "at": "2026-10-23T18:29:02.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-pqh8-4pj7-32xx (critical). Fixed in 1.3.1.",
        "pt": "O GitHub publicou o alerta GHSA-pqh8-4pj7-32xx (crítica). Corrigido em 1.3.1."
      },
      "url": "https://cveboard.org/i/cve-2026-77363",
      "json": "https://cveboard.org/i/cve-2026-77363.json",
      "incident": {
        "title": "obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 144,
      "id": "ghsa:GHSA-84c9-qqpq-2pq5:ghsa_published:2026-10-23T17:29:17.000Z",
      "incidentId": "cve-2026-77366",
      "type": "ghsa_published",
      "at": "2026-10-23T17:29:17.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-84c9-qqpq-2pq5 (critical). Fixed in 1.3.1.",
        "pt": "O GitHub publicou o alerta GHSA-84c9-qqpq-2pq5 (crítica). Corrigido em 1.3.1."
      },
      "url": "https://cveboard.org/i/cve-2026-77366",
      "json": "https://cveboard.org/i/cve-2026-77366.json",
      "incident": {
        "title": "obsidian-tc tokens can access arbitrary configured vaults",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 143,
      "id": "kev:CVE-2026-114625:kev_added:2026-10-23T00:00:00.000Z",
      "incidentId": "cve-2026-114625",
      "type": "kev_added",
      "at": "2026-10-23T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-26.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-26."
      },
      "url": "https://cveboard.org/i/cve-2026-114625",
      "json": "https://cveboard.org/i/cve-2026-114625.json",
      "incident": {
        "title": "Arista VeloCloud Orchestrator SQL Injection Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 142,
      "id": "ghsa:GHSA-673q-mjm6-r5xr:ghsa_published:2026-10-22T16:42:31.000Z",
      "incidentId": "ghsa-673q-mjm6-r5xr",
      "type": "ghsa_published",
      "at": "2026-10-22T16:42:31.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-673q-mjm6-r5xr (critical). Fixed in 16.4.1.",
        "pt": "O GitHub publicou o alerta GHSA-673q-mjm6-r5xr (crítica). Corrigido em 16.4.1."
      },
      "url": "https://cveboard.org/i/ghsa-673q-mjm6-r5xr",
      "json": "https://cveboard.org/i/ghsa-673q-mjm6-r5xr.json",
      "incident": {
        "title": "Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 141,
      "id": "ghsa:GHSA-cg2g-xh64-v4q7:ghsa_published:2026-10-22T16:25:31.000Z",
      "incidentId": "ghsa-cg2g-xh64-v4q7",
      "type": "ghsa_published",
      "at": "2026-10-22T16:25:31.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-cg2g-xh64-v4q7 (critical). Fixed in 3.4.17.",
        "pt": "O GitHub publicou o alerta GHSA-cg2g-xh64-v4q7 (crítica). Corrigido em 3.4.17."
      },
      "url": "https://cveboard.org/i/ghsa-cg2g-xh64-v4q7",
      "json": "https://cveboard.org/i/ghsa-cg2g-xh64-v4q7.json",
      "incident": {
        "title": "DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 140,
      "id": "ghsa:GHSA-v9pv-5gc8-w2m6:ghsa_published:2026-10-22T16:00:15.000Z",
      "incidentId": "cve-2026-96639",
      "type": "ghsa_published",
      "at": "2026-10-22T16:00:15.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-v9pv-5gc8-w2m6 (critical). Fixed in 13.0.0.",
        "pt": "O GitHub publicou o alerta GHSA-v9pv-5gc8-w2m6 (crítica). Corrigido em 13.0.0."
      },
      "url": "https://cveboard.org/i/cve-2026-96639",
      "json": "https://cveboard.org/i/cve-2026-96639.json",
      "incident": {
        "title": "Pillow multi-frame loaders can reuse stale native image storage after mode transitions",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 139,
      "id": "ghsa:GHSA-mchm-gjx6-7h55:ghsa_published:2026-10-22T15:55:07.000Z",
      "incidentId": "cve-2026-114139",
      "type": "ghsa_published",
      "at": "2026-10-22T15:55:07.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-mchm-gjx6-7h55 (critical). Fixed in 9.47.2, 10.75.2, 11.0.0-rc.1.",
        "pt": "O GitHub publicou o alerta GHSA-mchm-gjx6-7h55 (crítica). Corrigido em 9.47.2, 10.75.2, 11.0.0-rc.1."
      },
      "url": "https://cveboard.org/i/cve-2026-114139",
      "json": "https://cveboard.org/i/cve-2026-114139.json",
      "incident": {
        "title": "Sentry-Javascript: Middleware Bypass when using Tunnel route",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 138,
      "id": "ghsa:GHSA-2464-fhr4-w9xw:ghsa_published:2026-10-22T15:52:53.000Z",
      "incidentId": "ghsa-2464-fhr4-w9xw",
      "type": "ghsa_published",
      "at": "2026-10-22T15:52:53.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-2464-fhr4-w9xw (critical). Fixed in 15.5.28, 16.4.1.",
        "pt": "O GitHub publicou o alerta GHSA-2464-fhr4-w9xw (crítica). Corrigido em 15.5.28, 16.4.1."
      },
      "url": "https://cveboard.org/i/ghsa-2464-fhr4-w9xw",
      "json": "https://cveboard.org/i/ghsa-2464-fhr4-w9xw.json",
      "incident": {
        "title": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 137,
      "id": "ghsa:GHSA-332p-7hrc-92wf:ghsa_published:2026-10-21T21:28:09.000Z",
      "incidentId": "cve-2026-112393",
      "type": "ghsa_published",
      "at": "2026-10-21T21:28:09.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-332p-7hrc-92wf (critical). Fixed in 13.0.0.",
        "pt": "O GitHub publicou o alerta GHSA-332p-7hrc-92wf (crítica). Corrigido em 13.0.0."
      },
      "url": "https://cveboard.org/i/cve-2026-112393",
      "json": "https://cveboard.org/i/cve-2026-112393.json",
      "incident": {
        "title": "Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 136,
      "id": "ghsa:GHSA-w889-685w-c8fh:ghsa_published:2026-10-21T19:58:44.000Z",
      "incidentId": "cve-2026-112900",
      "type": "ghsa_published",
      "at": "2026-10-21T19:58:44.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-w889-685w-c8fh (critical). Fixed in 13.0.0.",
        "pt": "O GitHub publicou o alerta GHSA-w889-685w-c8fh (crítica). Corrigido em 13.0.0."
      },
      "url": "https://cveboard.org/i/cve-2026-112900",
      "json": "https://cveboard.org/i/cve-2026-112900.json",
      "incident": {
        "title": "Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 135,
      "id": "ghsa:GHSA-f2ph-cmg5-wxc8:ghsa_published:2026-10-21T17:23:29.000Z",
      "incidentId": "cve-2026-114125",
      "type": "ghsa_published",
      "at": "2026-10-21T17:23:29.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-f2ph-cmg5-wxc8 (critical). Fixed in 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6.",
        "pt": "O GitHub publicou o alerta GHSA-f2ph-cmg5-wxc8 (crítica). Corrigido em 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6."
      },
      "url": "https://cveboard.org/i/cve-2026-114125",
      "json": "https://cveboard.org/i/cve-2026-114125.json",
      "incident": {
        "title": "Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 134,
      "id": "ghsa:GHSA-8g5g-8vmr-9782:ghsa_published:2026-10-20T20:40:07.000Z",
      "incidentId": "cve-2026-112403",
      "type": "ghsa_published",
      "at": "2026-10-20T20:40:07.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-8g5g-8vmr-9782 (critical). Fixed in 13.0.0.",
        "pt": "O GitHub publicou o alerta GHSA-8g5g-8vmr-9782 (crítica). Corrigido em 13.0.0."
      },
      "url": "https://cveboard.org/i/cve-2026-112403",
      "json": "https://cveboard.org/i/cve-2026-112403.json",
      "incident": {
        "title": "Pillow: Heap buffer overflow in ImagingJpegDecode",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 133,
      "id": "ghsa:GHSA-hq85-5cpj-mr62:ghsa_published:2026-10-20T19:37:52.000Z",
      "incidentId": "ghsa-hq85-5cpj-mr62",
      "type": "ghsa_published",
      "at": "2026-10-20T19:37:52.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-hq85-5cpj-mr62 (critical). Fixed in 0.13.4.",
        "pt": "O GitHub publicou o alerta GHSA-hq85-5cpj-mr62 (crítica). Corrigido em 0.13.4."
      },
      "url": "https://cveboard.org/i/ghsa-hq85-5cpj-mr62",
      "json": "https://cveboard.org/i/ghsa-hq85-5cpj-mr62.json",
      "incident": {
        "title": "uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 132,
      "id": "ghsa:GHSA-6q48-6c7w-9gw2:ghsa_published:2026-10-20T19:35:05.000Z",
      "incidentId": "ghsa-6q48-6c7w-9gw2",
      "type": "ghsa_published",
      "at": "2026-10-20T19:35:05.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-6q48-6c7w-9gw2 (critical). Fixed in 2026.10.19.",
        "pt": "O GitHub publicou o alerta GHSA-6q48-6c7w-9gw2 (crítica). Corrigido em 2026.10.19."
      },
      "url": "https://cveboard.org/i/ghsa-6q48-6c7w-9gw2",
      "json": "https://cveboard.org/i/ghsa-6q48-6c7w-9gw2.json",
      "incident": {
        "title": "certifi bundles emSign root CAs with compromised intermediate CA keys",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 131,
      "id": "ghsa:GHSA-f8c7-rwf9-fmgm:ghsa_published:2026-10-19T17:00:54.000Z",
      "incidentId": "cve-2026-111057",
      "type": "ghsa_published",
      "at": "2026-10-19T17:00:54.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-f8c7-rwf9-fmgm (critical). Fixed in 3.2.4.",
        "pt": "O GitHub publicou o alerta GHSA-f8c7-rwf9-fmgm (crítica). Corrigido em 3.2.4."
      },
      "url": "https://cveboard.org/i/cve-2026-111057",
      "json": "https://cveboard.org/i/cve-2026-111057.json",
      "incident": {
        "title": "Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 130,
      "id": "ghsa:GHSA-rv4m-xm3f-3ccq:ghsa_published:2026-10-19T16:49:08.000Z",
      "incidentId": "cve-2026-111058",
      "type": "ghsa_published",
      "at": "2026-10-19T16:49:08.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-rv4m-xm3f-3ccq (critical). Fixed in 3.2.6.",
        "pt": "O GitHub publicou o alerta GHSA-rv4m-xm3f-3ccq (crítica). Corrigido em 3.2.6."
      },
      "url": "https://cveboard.org/i/cve-2026-111058",
      "json": "https://cveboard.org/i/cve-2026-111058.json",
      "incident": {
        "title": "Mercury: Unauthenticated Remote Code Execution via /api/kernels",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 129,
      "id": "ghsa:GHSA-w5f2-9q9c-ff4h:ghsa_published:2026-10-16T20:08:44.000Z",
      "incidentId": "cve-2026-105192",
      "type": "ghsa_published",
      "at": "2026-10-16T20:08:44.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-w5f2-9q9c-ff4h (critical). Fixed in 0.5.6.",
        "pt": "O GitHub publicou o alerta GHSA-w5f2-9q9c-ff4h (crítica). Corrigido em 0.5.6."
      },
      "url": "https://cveboard.org/i/cve-2026-105192",
      "json": "https://cveboard.org/i/cve-2026-105192.json",
      "incident": {
        "title": "LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 128,
      "id": "ghsa:GHSA-h4mw-j7qp-8mwm:ghsa_published:2026-10-16T19:44:37.000Z",
      "incidentId": "cve-2026-96620",
      "type": "ghsa_published",
      "at": "2026-10-16T19:44:37.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-h4mw-j7qp-8mwm (critical). Fixed in 0.2.121.",
        "pt": "O GitHub publicou o alerta GHSA-h4mw-j7qp-8mwm (crítica). Corrigido em 0.2.121."
      },
      "url": "https://cveboard.org/i/cve-2026-96620",
      "json": "https://cveboard.org/i/cve-2026-96620.json",
      "incident": {
        "title": "Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 127,
      "id": "ghsa:GHSA-qx66-fv34-fjm8:ghsa_published:2026-10-15T20:22:20.000Z",
      "incidentId": "cve-2026-102989",
      "type": "ghsa_published",
      "at": "2026-10-15T20:22:20.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-qx66-fv34-fjm8 (critical). Fixed in 1.169.39, 1.168.60, 1.168.57, 1.168.56.",
        "pt": "O GitHub publicou o alerta GHSA-qx66-fv34-fjm8 (crítica). Corrigido em 1.169.39, 1.168.60, 1.168.57, 1.168.56."
      },
      "url": "https://cveboard.org/i/cve-2026-102989",
      "json": "https://cveboard.org/i/cve-2026-102989.json",
      "incident": {
        "title": "TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 126,
      "id": "ghsa:GHSA-2cvf-wqm6-wr9g:ghsa_published:2026-10-15T20:22:16.000Z",
      "incidentId": "cve-2026-94603",
      "type": "ghsa_published",
      "at": "2026-10-15T20:22:16.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-2cvf-wqm6-wr9g (critical). Fixed in 5.8.8, 6.1.3.",
        "pt": "O GitHub publicou o alerta GHSA-2cvf-wqm6-wr9g (crítica). Corrigido em 5.8.8, 6.1.3."
      },
      "url": "https://cveboard.org/i/cve-2026-94603",
      "json": "https://cveboard.org/i/cve-2026-94603.json",
      "incident": {
        "title": "Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 125,
      "id": "ghsa:GHSA-637c-6jxx-4rwm:ghsa_published:2026-10-15T20:19:42.000Z",
      "incidentId": "cve-2026-77524",
      "type": "ghsa_published",
      "at": "2026-10-15T20:19:42.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-637c-6jxx-4rwm (critical). Fixed in 2.21.0.",
        "pt": "O GitHub publicou o alerta GHSA-637c-6jxx-4rwm (crítica). Corrigido em 2.21.0."
      },
      "url": "https://cveboard.org/i/cve-2026-77524",
      "json": "https://cveboard.org/i/cve-2026-77524.json",
      "incident": {
        "title": "KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 124,
      "id": "ghsa:GHSA-fmxq-cgp8-87wp:ghsa_published:2026-10-15T20:19:31.000Z",
      "incidentId": "cve-2026-77459",
      "type": "ghsa_published",
      "at": "2026-10-15T20:19:31.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-fmxq-cgp8-87wp (critical). Fixed in 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2.",
        "pt": "O GitHub publicou o alerta GHSA-fmxq-cgp8-87wp (crítica). Corrigido em 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2."
      },
      "url": "https://cveboard.org/i/cve-2026-77459",
      "json": "https://cveboard.org/i/cve-2026-77459.json",
      "incident": {
        "title": "Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 123,
      "id": "ghsa:GHSA-qj98-gp63-54xj:ghsa_published:2026-10-15T20:17:22.000Z",
      "incidentId": "cve-2026-102748",
      "type": "ghsa_published",
      "at": "2026-10-15T20:17:22.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-qj98-gp63-54xj (critical). Fixed in 25.4.0.",
        "pt": "O GitHub publicou o alerta GHSA-qj98-gp63-54xj (crítica). Corrigido em 25.4.0."
      },
      "url": "https://cveboard.org/i/cve-2026-102748",
      "json": "https://cveboard.org/i/cve-2026-102748.json",
      "incident": {
        "title": "Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 122,
      "id": "ghsa:GHSA-v75v-6fpf-gvw8:ghsa_published:2026-10-15T20:16:29.000Z",
      "incidentId": "cve-2026-104252",
      "type": "ghsa_published",
      "at": "2026-10-15T20:16:29.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-v75v-6fpf-gvw8 (critical). Fixed in 0.23.5, 0.24.2.",
        "pt": "O GitHub publicou o alerta GHSA-v75v-6fpf-gvw8 (crítica). Corrigido em 0.23.5, 0.24.2."
      },
      "url": "https://cveboard.org/i/cve-2026-104252",
      "json": "https://cveboard.org/i/cve-2026-104252.json",
      "incident": {
        "title": "Vitess vttablet /twopcz reflected XSS",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 121,
      "id": "ghsa:GHSA-rv87-ccxw-8ggf:ghsa_published:2026-10-13T20:40:50.000Z",
      "incidentId": "cve-2026-88092",
      "type": "ghsa_published",
      "at": "2026-10-13T20:40:50.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-rv87-ccxw-8ggf (critical). Fixed in 8.0.32, 10.0.13, 11.0.0-rc.2, 9.0.21.",
        "pt": "O GitHub publicou o alerta GHSA-rv87-ccxw-8ggf (crítica). Corrigido em 8.0.32, 10.0.13, 11.0.0-rc.2, 9.0.21."
      },
      "url": "https://cveboard.org/i/cve-2026-88092",
      "json": "https://cveboard.org/i/cve-2026-88092.json",
      "incident": {
        "title": "Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 120,
      "id": "ghsa:GHSA-fpq8-4vhr-rcxx:ghsa_published:2026-10-13T20:37:27.000Z",
      "incidentId": "cve-2026-70188",
      "type": "ghsa_published",
      "at": "2026-10-13T20:37:27.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-fpq8-4vhr-rcxx (critical). Fixed in 11.0.0-rc.2, 8.0.32, 10.0.13, 9.0.21.",
        "pt": "O GitHub publicou o alerta GHSA-fpq8-4vhr-rcxx (crítica). Corrigido em 11.0.0-rc.2, 8.0.32, 10.0.13, 9.0.21."
      },
      "url": "https://cveboard.org/i/cve-2026-70188",
      "json": "https://cveboard.org/i/cve-2026-70188.json",
      "incident": {
        "title": "Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 119,
      "id": "ghsa:GHSA-5gjq-3f94-rcf7:ghsa_published:2026-10-13T19:56:35.000Z",
      "incidentId": "cve-2026-105016",
      "type": "ghsa_published",
      "at": "2026-10-13T19:56:35.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-5gjq-3f94-rcf7 (critical). Fixed in 2.5.11-ci.159417053.",
        "pt": "O GitHub publicou o alerta GHSA-5gjq-3f94-rcf7 (crítica). Corrigido em 2.5.11-ci.159417053."
      },
      "url": "https://cveboard.org/i/cve-2026-105016",
      "json": "https://cveboard.org/i/cve-2026-105016.json",
      "incident": {
        "title": "Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 118,
      "id": "ghsa:GHSA-x34j-47hf-4xg7:ghsa_published:2026-10-09T20:56:48.000Z",
      "incidentId": "cve-2026-108261",
      "type": "ghsa_published",
      "at": "2026-10-09T20:56:48.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-x34j-47hf-4xg7 (critical). Fixed in 3.14.0, 2.5.14.",
        "pt": "O GitHub publicou o alerta GHSA-x34j-47hf-4xg7 (crítica). Corrigido em 3.14.0, 2.5.14."
      },
      "url": "https://cveboard.org/i/cve-2026-108261",
      "json": "https://cveboard.org/i/cve-2026-108261.json",
      "incident": {
        "title": "TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 117,
      "id": "ghsa:GHSA-628f-v4f6-p37r:ghsa_published:2026-10-09T20:53:50.000Z",
      "incidentId": "cve-2026-107845",
      "type": "ghsa_published",
      "at": "2026-10-09T20:53:50.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-628f-v4f6-p37r (critical). Fixed in 5.3.50, 5.7.12.",
        "pt": "O GitHub publicou o alerta GHSA-628f-v4f6-p37r (crítica). Corrigido em 5.3.50, 5.7.12."
      },
      "url": "https://cveboard.org/i/cve-2026-107845",
      "json": "https://cveboard.org/i/cve-2026-107845.json",
      "incident": {
        "title": "Contao: Cross-site scripting in the comments bundle",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 116,
      "id": "ghsa:GHSA-p8wg-vrv2-v86f:ghsa_published:2026-10-08T17:52:26.000Z",
      "incidentId": "cve-2026-106445",
      "type": "ghsa_published",
      "at": "2026-10-08T17:52:26.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-p8wg-vrv2-v86f (critical). Fixed in 4.7.10.",
        "pt": "O GitHub publicou o alerta GHSA-p8wg-vrv2-v86f (crítica). Corrigido em 4.7.10."
      },
      "url": "https://cveboard.org/i/cve-2026-106445",
      "json": "https://cveboard.org/i/cve-2026-106445.json",
      "incident": {
        "title": "Handlebars: JavaScript Injection via Own Property Check Bypass",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 115,
      "id": "ghsa:GHSA-5f42-97gr-vfhq:ghsa_published:2026-09-23T16:11:18.000Z",
      "incidentId": "cve-2026-85724",
      "type": "ghsa_published",
      "at": "2026-09-23T16:11:18.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-5f42-97gr-vfhq (critical). Fixed in 0.18.1.",
        "pt": "O GitHub publicou o alerta GHSA-5f42-97gr-vfhq (crítica). Corrigido em 0.18.1."
      },
      "url": "https://cveboard.org/i/cve-2026-85724",
      "json": "https://cveboard.org/i/cve-2026-85724.json",
      "incident": {
        "title": "Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 114,
      "id": "ghsa:GHSA-jjqf-j4w7-92w8:ghsa_published:2023-04-19T21:41:26.000Z",
      "incidentId": "cve-2023-22894",
      "type": "ghsa_published",
      "at": "2023-04-19T21:41:26.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-jjqf-j4w7-92w8 (high). Fixed in 4.8.0.",
        "pt": "O GitHub publicou o alerta GHSA-jjqf-j4w7-92w8 (alta). Corrigido em 4.8.0."
      },
      "url": "https://cveboard.org/i/cve-2023-22894",
      "json": "https://cveboard.org/i/cve-2023-22894.json",
      "incident": {
        "title": "Strapi leaking sensitive user information by filtering on private fields",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 113,
      "id": "ghsa:GHSA-8c6j-ffmf-q6vm:ghsa_published:2022-05-14T00:54:14.000Z",
      "incidentId": "cve-2016-3081",
      "type": "ghsa_published",
      "at": "2022-05-14T00:54:14.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-8c6j-ffmf-q6vm (high). Fixed in 2.3.20.3, 2.3.28.1, 2.3.24.3.",
        "pt": "O GitHub publicou o alerta GHSA-8c6j-ffmf-q6vm (alta). Corrigido em 2.3.20.3, 2.3.28.1, 2.3.24.3."
      },
      "url": "https://cveboard.org/i/cve-2016-3081",
      "json": "https://cveboard.org/i/cve-2016-3081.json",
      "incident": {
        "title": "Apache Struts RCE Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 112,
      "id": "hibp:AssuranceRetraite:hibp_added:2026-10-20T02:29:36.000Z",
      "incidentId": "breach-assuranceretraite-bfc345a8cc6f8f48b808a8677bd4c034",
      "type": "hibp_added",
      "at": "2026-10-20T02:29:36.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 70,372 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 70.372 contas."
      },
      "url": "https://cveboard.org/i/breach-assuranceretraite-bfc345a8cc6f8f48b808a8677bd4c034",
      "json": "https://cveboard.org/i/breach-assuranceretraite-bfc345a8cc6f8f48b808a8677bd4c034.json",
      "incident": {
        "title": "Assurance Retraite data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 111,
      "id": "kev:CVE-2026-110936:kev_added:2026-10-20T00:00:00.000Z",
      "incidentId": "cve-2026-110936",
      "type": "kev_added",
      "at": "2026-10-20T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-11-03.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-11-03."
      },
      "url": "https://cveboard.org/i/cve-2026-110936",
      "json": "https://cveboard.org/i/cve-2026-110936.json",
      "incident": {
        "title": "Siemens Software Center Uncontrolled Search Path Element Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 110,
      "id": "kev:CVE-2026-96652:kev_added:2026-10-20T00:00:00.000Z",
      "incidentId": "cve-2026-96652",
      "type": "kev_added",
      "at": "2026-10-20T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-11-03.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-11-03."
      },
      "url": "https://cveboard.org/i/cve-2026-96652",
      "json": "https://cveboard.org/i/cve-2026-96652.json",
      "incident": {
        "title": "Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "moderate",
        "retracted": false
      }
    },
    {
      "seq": 109,
      "id": "kev:CVE-2026-96654:kev_added:2026-10-20T00:00:00.000Z",
      "incidentId": "cve-2026-96654",
      "type": "kev_added",
      "at": "2026-10-20T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-23.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-23."
      },
      "url": "https://cveboard.org/i/cve-2026-96654",
      "json": "https://cveboard.org/i/cve-2026-96654.json",
      "incident": {
        "title": "Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "moderate",
        "retracted": false
      }
    },
    {
      "seq": 108,
      "id": "kev:CVE-2026-96655:kev_added:2026-10-20T00:00:00.000Z",
      "incidentId": "cve-2026-96655",
      "type": "kev_added",
      "at": "2026-10-20T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-11-03.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-11-03."
      },
      "url": "https://cveboard.org/i/cve-2026-96655",
      "json": "https://cveboard.org/i/cve-2026-96655.json",
      "incident": {
        "title": "Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "moderate",
        "retracted": false
      }
    },
    {
      "seq": 107,
      "id": "kev:CVE-2026-96656:kev_added:2026-10-20T00:00:00.000Z",
      "incidentId": "cve-2026-96656",
      "type": "kev_added",
      "at": "2026-10-20T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-23.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-23."
      },
      "url": "https://cveboard.org/i/cve-2026-96656",
      "json": "https://cveboard.org/i/cve-2026-96656.json",
      "incident": {
        "title": "Plex Media Server External Control of File Name or Path Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 106,
      "id": "kev:CVE-2026-106931:kev_added:2026-10-20T00:00:00.000Z",
      "incidentId": "cve-2026-106931",
      "type": "kev_added",
      "at": "2026-10-20T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-23.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-23."
      },
      "url": "https://cveboard.org/i/cve-2026-106931",
      "json": "https://cveboard.org/i/cve-2026-106931.json",
      "incident": {
        "title": "EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 105,
      "id": "hibp:GitesDeFrance:hibp_added:2026-10-18T04:50:13.000Z",
      "incidentId": "breach-gitesdefrance-bf48c8f0feeaa3f86163cda74aa4d873",
      "type": "hibp_added",
      "at": "2026-10-18T04:50:13.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 117,574 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 117.574 contas."
      },
      "url": "https://cveboard.org/i/breach-gitesdefrance-bf48c8f0feeaa3f86163cda74aa4d873",
      "json": "https://cveboard.org/i/breach-gitesdefrance-bf48c8f0feeaa3f86163cda74aa4d873.json",
      "incident": {
        "title": "Gîtes de France data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 104,
      "id": "kev:CVE-2025-61624:kev_added:2026-10-16T00:00:00.000Z",
      "incidentId": "cve-2025-61624",
      "type": "kev_added",
      "at": "2026-10-16T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-19.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-19."
      },
      "url": "https://cveboard.org/i/cve-2025-61624",
      "json": "https://cveboard.org/i/cve-2025-61624.json",
      "incident": {
        "title": "Fortinet Multiple Products Path Traversal Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "moderate",
        "retracted": false
      }
    },
    {
      "seq": 103,
      "id": "kev:CVE-2026-102764:kev_added:2026-10-16T00:00:00.000Z",
      "incidentId": "cve-2026-102764",
      "type": "kev_added",
      "at": "2026-10-16T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-19.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-19."
      },
      "url": "https://cveboard.org/i/cve-2026-102764",
      "json": "https://cveboard.org/i/cve-2026-102764.json",
      "incident": {
        "title": "BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 102,
      "id": "kev:CVE-2026-21589:kev_added:2026-10-15T00:00:00.000Z",
      "incidentId": "cve-2026-21589",
      "type": "kev_added",
      "at": "2026-10-15T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-18.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-18."
      },
      "url": "https://cveboard.org/i/cve-2026-21589",
      "json": "https://cveboard.org/i/cve-2026-21589.json",
      "incident": {
        "title": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 101,
      "id": "hibp:Crunchbase:hibp_added:2026-10-14T06:01:26.000Z",
      "incidentId": "breach-crunchbase-e7865d6dd990d78d96d1d4fd04fb5645",
      "type": "hibp_added",
      "at": "2026-10-14T06:01:26.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 559,908 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 559.908 contas."
      },
      "url": "https://cveboard.org/i/breach-crunchbase-e7865d6dd990d78d96d1d4fd04fb5645",
      "json": "https://cveboard.org/i/breach-crunchbase-e7865d6dd990d78d96d1d4fd04fb5645.json",
      "incident": {
        "title": "Crunchbase data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 100,
      "id": "kev:CVE-2026-0322:kev_added:2026-10-14T00:00:00.000Z",
      "incidentId": "cve-2026-0322",
      "type": "kev_added",
      "at": "2026-10-14T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-17.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-17."
      },
      "url": "https://cveboard.org/i/cve-2026-0322",
      "json": "https://cveboard.org/i/cve-2026-0322.json",
      "incident": {
        "title": "Palo Alto Networks PAN-OS Code Injection Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 99,
      "id": "kev:CVE-2026-105133:kev_added:2026-10-14T00:00:00.000Z",
      "incidentId": "cve-2026-105133",
      "type": "kev_added",
      "at": "2026-10-14T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-17.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-17."
      },
      "url": "https://cveboard.org/i/cve-2026-105133",
      "json": "https://cveboard.org/i/cve-2026-105133.json",
      "incident": {
        "title": "Ahsay AhsayCBS Improper Authentication Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "moderate",
        "retracted": false
      }
    },
    {
      "seq": 98,
      "id": "kev:CVE-2026-76519:kev_added:2026-10-14T00:00:00.000Z",
      "incidentId": "cve-2026-76519",
      "type": "kev_added",
      "at": "2026-10-14T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-17.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-17."
      },
      "url": "https://cveboard.org/i/cve-2026-76519",
      "json": "https://cveboard.org/i/cve-2026-76519.json",
      "incident": {
        "title": "Cisco Secure Email Gateway Relative Path Traversal Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 97,
      "id": "kev:CVE-2026-105134:kev_added:2026-10-14T00:00:00.000Z",
      "incidentId": "cve-2026-105134",
      "type": "kev_added",
      "at": "2026-10-14T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-17.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-17."
      },
      "url": "https://cveboard.org/i/cve-2026-105134",
      "json": "https://cveboard.org/i/cve-2026-105134.json",
      "incident": {
        "title": "Ahsay AhsayCBS Command Injection Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 96,
      "id": "kev:CVE-2026-96951:kev_added:2026-10-13T00:00:00.000Z",
      "incidentId": "cve-2026-96951",
      "type": "kev_added",
      "at": "2026-10-13T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-16.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-16."
      },
      "url": "https://cveboard.org/i/cve-2026-96951",
      "json": "https://cveboard.org/i/cve-2026-96951.json",
      "incident": {
        "title": "Microsoft Windows Command Injection Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 95,
      "id": "kev:CVE-2026-104935:kev_added:2026-10-13T00:00:00.000Z",
      "incidentId": "cve-2026-104935",
      "type": "kev_added",
      "at": "2026-10-13T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-16.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-16."
      },
      "url": "https://cveboard.org/i/cve-2026-104935",
      "json": "https://cveboard.org/i/cve-2026-104935.json",
      "incident": {
        "title": "Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 94,
      "id": "hibp:Sharecare:hibp_added:2026-10-12T23:28:32.000Z",
      "incidentId": "breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1",
      "type": "hibp_added",
      "at": "2026-10-12T23:28:32.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 318,185 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 318.185 contas."
      },
      "url": "https://cveboard.org/i/breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1",
      "json": "https://cveboard.org/i/breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1.json",
      "incident": {
        "title": "Sharecare data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 93,
      "id": "ghsa:GHSA-p393-cf76-4jmr:ghsa_published:2026-10-09T20:45:02.000Z",
      "incidentId": "cve-2026-107806",
      "type": "ghsa_published",
      "at": "2026-10-09T20:45:02.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-p393-cf76-4jmr (critical). Fixed in 1.9.10-0.20260728074146-a467ed652591.",
        "pt": "O GitHub publicou o alerta GHSA-p393-cf76-4jmr (crítica). Corrigido em 1.9.10-0.20260728074146-a467ed652591."
      },
      "url": "https://cveboard.org/i/cve-2026-107806",
      "json": "https://cveboard.org/i/cve-2026-107806.json",
      "incident": {
        "title": "Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 92,
      "id": "ghsa:GHSA-rj9j-8772-4h6c:ghsa_published:2026-10-09T20:42:33.000Z",
      "incidentId": "cve-2026-68582",
      "type": "ghsa_published",
      "at": "2026-10-09T20:42:33.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-rj9j-8772-4h6c (critical). Fixed in 2.4.0.",
        "pt": "O GitHub publicou o alerta GHSA-rj9j-8772-4h6c (crítica). Corrigido em 2.4.0."
      },
      "url": "https://cveboard.org/i/cve-2026-68582",
      "json": "https://cveboard.org/i/cve-2026-68582.json",
      "incident": {
        "title": "Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 91,
      "id": "hibp:Neogen:hibp_added:2026-10-09T07:06:25.000Z",
      "incidentId": "breach-neogen-c8f5fbec903c64bf6e81095ec6001fa1",
      "type": "hibp_added",
      "at": "2026-10-09T07:06:25.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 435,963 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 435.963 contas."
      },
      "url": "https://cveboard.org/i/breach-neogen-c8f5fbec903c64bf6e81095ec6001fa1",
      "json": "https://cveboard.org/i/breach-neogen-c8f5fbec903c64bf6e81095ec6001fa1.json",
      "incident": {
        "title": "Neogen data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 90,
      "id": "ghsa:GHSA-6v25-8wq6-xq4j:ghsa_published:2026-10-08T22:10:29.000Z",
      "incidentId": "cve-2026-107726",
      "type": "ghsa_published",
      "at": "2026-10-08T22:10:29.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-6v25-8wq6-xq4j (critical). Fixed in 5.7.0.",
        "pt": "O GitHub publicou o alerta GHSA-6v25-8wq6-xq4j (crítica). Corrigido em 5.7.0."
      },
      "url": "https://cveboard.org/i/cve-2026-107726",
      "json": "https://cveboard.org/i/cve-2026-107726.json",
      "incident": {
        "title": "Hazelcast allows arbitrary member memory access by low-privileged client",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 89,
      "id": "ghsa:GHSA-ww5h-9m49-7xx4:ghsa_published:2026-10-08T22:02:07.000Z",
      "incidentId": "cve-2026-107722",
      "type": "ghsa_published",
      "at": "2026-10-08T22:02:07.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-ww5h-9m49-7xx4 (critical). Fixed in 6.3.0.",
        "pt": "O GitHub publicou o alerta GHSA-ww5h-9m49-7xx4 (crítica). Corrigido em 6.3.0."
      },
      "url": "https://cveboard.org/i/cve-2026-107722",
      "json": "https://cveboard.org/i/cve-2026-107722.json",
      "incident": {
        "title": "fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 88,
      "id": "ghsa:GHSA-9mp3-24cc-77mg:ghsa_published:2026-10-08T22:00:40.000Z",
      "incidentId": "cve-2026-61445",
      "type": "ghsa_published",
      "at": "2026-10-08T22:00:40.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-9mp3-24cc-77mg (critical). Fixed in 4.6.78.",
        "pt": "O GitHub publicou o alerta GHSA-9mp3-24cc-77mg (crítica). Corrigido em 4.6.78."
      },
      "url": "https://cveboard.org/i/cve-2026-61445",
      "json": "https://cveboard.org/i/cve-2026-61445.json",
      "incident": {
        "title": "PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 87,
      "id": "ghsa:GHSA-8r5x-fm3f-whwj:ghsa_published:2026-10-08T17:52:32.000Z",
      "incidentId": "cve-2026-106446",
      "type": "ghsa_published",
      "at": "2026-10-08T17:52:32.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-8r5x-fm3f-whwj (critical). Fixed in 4.7.10.",
        "pt": "O GitHub publicou o alerta GHSA-8r5x-fm3f-whwj (crítica). Corrigido em 4.7.10."
      },
      "url": "https://cveboard.org/i/cve-2026-106446",
      "json": "https://cveboard.org/i/cve-2026-106446.json",
      "incident": {
        "title": "Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 86,
      "id": "ghsa:GHSA-2xv2-w8cq-5gxw:ghsa_published:2026-10-08T16:44:01.000Z",
      "incidentId": "cve-2026-61447",
      "type": "ghsa_published",
      "at": "2026-10-08T16:44:01.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-2xv2-w8cq-5gxw (critical). Fixed in 1.6.78.",
        "pt": "O GitHub publicou o alerta GHSA-2xv2-w8cq-5gxw (crítica). Corrigido em 1.6.78."
      },
      "url": "https://cveboard.org/i/cve-2026-61447",
      "json": "https://cveboard.org/i/cve-2026-61447.json",
      "incident": {
        "title": "PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 85,
      "id": "ghsa:GHSA-jmqq-x5g9-9p2w:ghsa_published:2026-10-08T16:30:46.000Z",
      "incidentId": "cve-2026-107282",
      "type": "ghsa_published",
      "at": "2026-10-08T16:30:46.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-jmqq-x5g9-9p2w (critical). Fixed in 3.0.13, 2.16.1.",
        "pt": "O GitHub publicou o alerta GHSA-jmqq-x5g9-9p2w (crítica). Corrigido em 3.0.13, 2.16.1."
      },
      "url": "https://cveboard.org/i/cve-2026-107282",
      "json": "https://cveboard.org/i/cve-2026-107282.json",
      "incident": {
        "title": "AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 84,
      "id": "kev:CVE-2015-3306:kev_added:2026-10-08T00:00:00.000Z",
      "incidentId": "cve-2015-3306",
      "type": "kev_added",
      "at": "2026-10-08T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-11.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-11."
      },
      "url": "https://cveboard.org/i/cve-2015-3306",
      "json": "https://cveboard.org/i/cve-2015-3306.json",
      "incident": {
        "title": "ProFTPD Improper Access Control Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 83,
      "id": "kev:CVE-2021-3199:kev_added:2026-10-08T00:00:00.000Z",
      "incidentId": "cve-2021-3199",
      "type": "kev_added",
      "at": "2026-10-08T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-11.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-11."
      },
      "url": "https://cveboard.org/i/cve-2021-3199",
      "json": "https://cveboard.org/i/cve-2021-3199.json",
      "incident": {
        "title": "ONLYOFFICE Docs Server Path Traversal Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 82,
      "id": "kev:CVE-2023-22894:kev_added:2026-10-08T00:00:00.000Z",
      "incidentId": "cve-2023-22894",
      "type": "kev_added",
      "at": "2026-10-08T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-11.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-11."
      },
      "url": "https://cveboard.org/i/cve-2023-22894",
      "json": "https://cveboard.org/i/cve-2023-22894.json",
      "incident": {
        "title": "Strapi leaking sensitive user information by filtering on private fields",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 81,
      "id": "kev:CVE-2016-3081:kev_added:2026-10-08T00:00:00.000Z",
      "incidentId": "cve-2016-3081",
      "type": "kev_added",
      "at": "2026-10-08T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-11.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-11."
      },
      "url": "https://cveboard.org/i/cve-2016-3081",
      "json": "https://cveboard.org/i/cve-2016-3081.json",
      "incident": {
        "title": "Apache Struts RCE Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 80,
      "id": "kev:CVE-2015-5477:kev_added:2026-10-08T00:00:00.000Z",
      "incidentId": "cve-2015-5477",
      "type": "kev_added",
      "at": "2026-10-08T00:00:00.000Z",
      "text": {
        "en": "Added to CISA's Known Exploited Vulnerabilities catalog: exploited in the wild. US federal agencies must remediate by 2026-10-11.",
        "pt": "Incluída no catálogo de vulnerabilidades exploradas da CISA: exploração ativa confirmada. Agências federais dos EUA devem corrigir até 2026-10-11."
      },
      "url": "https://cveboard.org/i/cve-2015-5477",
      "json": "https://cveboard.org/i/cve-2015-5477.json",
      "incident": {
        "title": "ISC BIND Data Processing Errors Vulnerability",
        "kind": "vuln",
        "knownExploited": true,
        "severity": "high",
        "retracted": false
      }
    },
    {
      "seq": 79,
      "id": "hibp:CyrusOne:hibp_added:2026-10-07T23:19:16.000Z",
      "incidentId": "breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47",
      "type": "hibp_added",
      "at": "2026-10-07T23:19:16.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 373,460 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 373.460 contas."
      },
      "url": "https://cveboard.org/i/breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47",
      "json": "https://cveboard.org/i/breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47.json",
      "incident": {
        "title": "CyrusOne data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 78,
      "id": "ghsa:GHSA-w794-rj3p-xv45:ghsa_published:2026-10-07T20:36:35.000Z",
      "incidentId": "cve-2026-105697",
      "type": "ghsa_published",
      "at": "2026-10-07T20:36:35.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-w794-rj3p-xv45 (critical). Fixed in 1.10.3, 0.10.3.",
        "pt": "O GitHub publicou o alerta GHSA-w794-rj3p-xv45 (crítica). Corrigido em 1.10.3, 0.10.3."
      },
      "url": "https://cveboard.org/i/cve-2026-105697",
      "json": "https://cveboard.org/i/cve-2026-105697.json",
      "incident": {
        "title": "Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 77,
      "id": "ghsa:GHSA-r488-j9vj-wx3q:ghsa_published:2026-10-07T20:28:33.000Z",
      "incidentId": "cve-2026-105857",
      "type": "ghsa_published",
      "at": "2026-10-07T20:28:33.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-r488-j9vj-wx3q (critical). Fixed in 3.90.0, 4.0.0-canary.34.",
        "pt": "O GitHub publicou o alerta GHSA-r488-j9vj-wx3q (crítica). Corrigido em 3.90.0, 4.0.0-canary.34."
      },
      "url": "https://cveboard.org/i/cve-2026-105857",
      "json": "https://cveboard.org/i/cve-2026-105857.json",
      "incident": {
        "title": "Payload Form Builder has an RCE issue",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 76,
      "id": "ghsa:GHSA-f7hx-52q9-hcrf:ghsa_published:2026-10-07T20:28:27.000Z",
      "incidentId": "cve-2026-105859",
      "type": "ghsa_published",
      "at": "2026-10-07T20:28:27.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-f7hx-52q9-hcrf (critical). Fixed in 3.90.0, 4.0.0-canary.34.",
        "pt": "O GitHub publicou o alerta GHSA-f7hx-52q9-hcrf (crítica). Corrigido em 3.90.0, 4.0.0-canary.34."
      },
      "url": "https://cveboard.org/i/cve-2026-105859",
      "json": "https://cveboard.org/i/cve-2026-105859.json",
      "incident": {
        "title": "Payload: Unauthorized update to collection documents",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 75,
      "id": "ghsa:GHSA-66wr-7vmr-p5jq:ghsa_published:2026-10-07T20:28:18.000Z",
      "incidentId": "cve-2026-105863",
      "type": "ghsa_published",
      "at": "2026-10-07T20:28:18.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-66wr-7vmr-p5jq (critical). Fixed in 3.90.0, 4.0.0-canary.34.",
        "pt": "O GitHub publicou o alerta GHSA-66wr-7vmr-p5jq (crítica). Corrigido em 3.90.0, 4.0.0-canary.34."
      },
      "url": "https://cveboard.org/i/cve-2026-105863",
      "json": "https://cveboard.org/i/cve-2026-105863.json",
      "incident": {
        "title": "Payload authentication token field handling issue",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 74,
      "id": "ghsa:GHSA-pq68-rvw4-xp4r:ghsa_published:2026-10-07T18:05:00.000Z",
      "incidentId": "cve-2026-93605",
      "type": "ghsa_published",
      "at": "2026-10-07T18:05:00.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-pq68-rvw4-xp4r (critical). Fixed in 3.12.1.",
        "pt": "O GitHub publicou o alerta GHSA-pq68-rvw4-xp4r (crítica). Corrigido em 3.12.1."
      },
      "url": "https://cveboard.org/i/cve-2026-93605",
      "json": "https://cveboard.org/i/cve-2026-93605.json",
      "incident": {
        "title": "vm2 contains a sandbox escape vulnerability",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 73,
      "id": "ghsa:GHSA-g2v8-7jhw-pp8p:ghsa_published:2026-10-07T17:59:19.000Z",
      "incidentId": "cve-2026-106501",
      "type": "ghsa_published",
      "at": "2026-10-07T17:59:19.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-g2v8-7jhw-pp8p (critical). Fixed in 3.3.1, 3.4.1, 4.0.3, 4.1.0.",
        "pt": "O GitHub publicou o alerta GHSA-g2v8-7jhw-pp8p (crítica). Corrigido em 3.3.1, 3.4.1, 4.0.3, 4.1.0."
      },
      "url": "https://cveboard.org/i/cve-2026-106501",
      "json": "https://cveboard.org/i/cve-2026-106501.json",
      "incident": {
        "title": "Backstage: Sensitive information exposure in Scaffolder",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 72,
      "id": "ghsa:GHSA-w7x8-q2gp-5cgg:ghsa_published:2026-10-07T16:17:21.000Z",
      "incidentId": "cve-2026-73487",
      "type": "ghsa_published",
      "at": "2026-10-07T16:17:21.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-w7x8-q2gp-5cgg (critical). Fixed in 3.1.3.",
        "pt": "O GitHub publicou o alerta GHSA-w7x8-q2gp-5cgg (crítica). Corrigido em 3.1.3."
      },
      "url": "https://cveboard.org/i/cve-2026-73487",
      "json": "https://cveboard.org/i/cve-2026-73487.json",
      "incident": {
        "title": "Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 71,
      "id": "ghsa:GHSA-9gvv-qjj3-2p6g:ghsa_published:2026-10-07T16:17:02.000Z",
      "incidentId": "cve-2026-73483",
      "type": "ghsa_published",
      "at": "2026-10-07T16:17:02.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-9gvv-qjj3-2p6g (critical). Fixed in 3.1.3.",
        "pt": "O GitHub publicou o alerta GHSA-9gvv-qjj3-2p6g (crítica). Corrigido em 3.1.3."
      },
      "url": "https://cveboard.org/i/cve-2026-73483",
      "json": "https://cveboard.org/i/cve-2026-73483.json",
      "incident": {
        "title": "Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 70,
      "id": "ghsa:GHSA-pq96-jpmf-w254:ghsa_published:2026-10-07T16:14:22.000Z",
      "incidentId": "cve-2026-106102",
      "type": "ghsa_published",
      "at": "2026-10-07T16:14:22.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-pq96-jpmf-w254 (critical). Fixed in 2.22.0.",
        "pt": "O GitHub publicou o alerta GHSA-pq96-jpmf-w254 (crítica). Corrigido em 2.22.0."
      },
      "url": "https://cveboard.org/i/cve-2026-106102",
      "json": "https://cveboard.org/i/cve-2026-106102.json",
      "incident": {
        "title": "Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 69,
      "id": "ghsa:GHSA-6xp5-7rcx-xfgx:ghsa_published:2026-10-07T16:12:02.000Z",
      "incidentId": "cve-2026-62252",
      "type": "ghsa_published",
      "at": "2026-10-07T16:12:02.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-6xp5-7rcx-xfgx (critical). Fixed in 0.0.0-20260625091610-b2e942031ff8.",
        "pt": "O GitHub publicou o alerta GHSA-6xp5-7rcx-xfgx (crítica). Corrigido em 0.0.0-20260625091610-b2e942031ff8."
      },
      "url": "https://cveboard.org/i/cve-2026-62252",
      "json": "https://cveboard.org/i/cve-2026-62252.json",
      "incident": {
        "title": "Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 68,
      "id": "ghsa:GHSA-rqcc-94gv-wjm9:ghsa_published:2026-10-07T16:11:58.000Z",
      "incidentId": "cve-2026-62253",
      "type": "ghsa_published",
      "at": "2026-10-07T16:11:58.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-rqcc-94gv-wjm9 (critical). Fixed in 0.0.0-20260625093330-5e90809657c9.",
        "pt": "O GitHub publicou o alerta GHSA-rqcc-94gv-wjm9 (crítica). Corrigido em 0.0.0-20260625093330-5e90809657c9."
      },
      "url": "https://cveboard.org/i/cve-2026-62253",
      "json": "https://cveboard.org/i/cve-2026-62253.json",
      "incident": {
        "title": "Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 67,
      "id": "ghsa:GHSA-g6j7-pffp-8whg:ghsa_published:2026-10-07T16:05:53.000Z",
      "incidentId": "cve-2026-62176",
      "type": "ghsa_published",
      "at": "2026-10-07T16:05:53.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-g6j7-pffp-8whg (critical). Fixed in 4.6.78.",
        "pt": "O GitHub publicou o alerta GHSA-g6j7-pffp-8whg (crítica). Corrigido em 4.6.78."
      },
      "url": "https://cveboard.org/i/cve-2026-62176",
      "json": "https://cveboard.org/i/cve-2026-62176.json",
      "incident": {
        "title": "PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 66,
      "id": "hibp:DoubleCounter:hibp_added:2026-10-07T05:42:24.000Z",
      "incidentId": "breach-doublecounter-a65060a43de2c01edc90c12746e1ab64",
      "type": "hibp_added",
      "at": "2026-10-07T05:42:24.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 274,922 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 274.922 contas."
      },
      "url": "https://cveboard.org/i/breach-doublecounter-a65060a43de2c01edc90c12746e1ab64",
      "json": "https://cveboard.org/i/breach-doublecounter-a65060a43de2c01edc90c12746e1ab64.json",
      "incident": {
        "title": "Double Counter data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 65,
      "id": "hibp:AngelOne:hibp_added:2026-10-07T03:45:31.000Z",
      "incidentId": "breach-angelone-2f893b2123659aa8a5cf328e64eec992",
      "type": "hibp_added",
      "at": "2026-10-07T03:45:31.000Z",
      "text": {
        "en": "Have I Been Pwned loaded the breach: 6,765,054 accounts.",
        "pt": "O Have I Been Pwned carregou o vazamento: 6.765.054 contas."
      },
      "url": "https://cveboard.org/i/breach-angelone-2f893b2123659aa8a5cf328e64eec992",
      "json": "https://cveboard.org/i/breach-angelone-2f893b2123659aa8a5cf328e64eec992.json",
      "incident": {
        "title": "Angel One data breach",
        "kind": "breach",
        "knownExploited": false,
        "severity": null,
        "retracted": false
      }
    },
    {
      "seq": 64,
      "id": "ghsa:GHSA-vc4h-q48j-5hcx:ghsa_published:2026-10-06T16:17:23.000Z",
      "incidentId": "cve-2026-105851",
      "type": "ghsa_published",
      "at": "2026-10-06T16:17:23.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-vc4h-q48j-5hcx (critical). Fixed in 3.90.0, 4.0.0-canary.34.",
        "pt": "O GitHub publicou o alerta GHSA-vc4h-q48j-5hcx (crítica). Corrigido em 3.90.0, 4.0.0-canary.34."
      },
      "url": "https://cveboard.org/i/cve-2026-105851",
      "json": "https://cveboard.org/i/cve-2026-105851.json",
      "incident": {
        "title": "Payload: Field access control bypass on auth collections",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 63,
      "id": "ghsa:GHSA-qf28-8hc6-vwrp:ghsa_published:2026-10-06T16:09:23.000Z",
      "incidentId": "cve-2026-105844",
      "type": "ghsa_published",
      "at": "2026-10-06T16:09:23.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-qf28-8hc6-vwrp (critical). Fixed in 3.88.0, 4.0.0-canary.27.",
        "pt": "O GitHub publicou o alerta GHSA-qf28-8hc6-vwrp (crítica). Corrigido em 3.88.0, 4.0.0-canary.27."
      },
      "url": "https://cveboard.org/i/cve-2026-105844",
      "json": "https://cveboard.org/i/cve-2026-105844.json",
      "incident": {
        "title": "Payload: Prototype pollution in Payload Import Export plugin",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 62,
      "id": "ghsa:GHSA-v49j-62m6-pgrr:ghsa_published:2026-10-06T16:09:17.000Z",
      "incidentId": "cve-2026-105845",
      "type": "ghsa_published",
      "at": "2026-10-06T16:09:17.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-v49j-62m6-pgrr (critical). Fixed in 3.88.0, 4.0.0-canary.27.",
        "pt": "O GitHub publicou o alerta GHSA-v49j-62m6-pgrr (crítica). Corrigido em 3.88.0, 4.0.0-canary.27."
      },
      "url": "https://cveboard.org/i/cve-2026-105845",
      "json": "https://cveboard.org/i/cve-2026-105845.json",
      "incident": {
        "title": "Payload: SQL Injection in SQLite and Postgres",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 61,
      "id": "ghsa:GHSA-w5f4-fx9m-m4q7:ghsa_published:2026-10-06T15:33:08.000Z",
      "incidentId": "cve-2026-105794",
      "type": "ghsa_published",
      "at": "2026-10-06T15:33:08.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-w5f4-fx9m-m4q7 (critical). Fixed in 2.4.20, 2.5.11, 2.6.1.",
        "pt": "O GitHub publicou o alerta GHSA-w5f4-fx9m-m4q7 (crítica). Corrigido em 2.4.20, 2.5.11, 2.6.1."
      },
      "url": "https://cveboard.org/i/cve-2026-105794",
      "json": "https://cveboard.org/i/cve-2026-105794.json",
      "incident": {
        "title": "MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 60,
      "id": "ghsa:GHSA-pqg4-j6r4-53mv:ghsa_published:2026-10-06T13:40:36.000Z",
      "incidentId": "cve-2026-102422",
      "type": "ghsa_published",
      "at": "2026-10-06T13:40:36.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-pqg4-j6r4-53mv (critical). Fixed in 1.11.0.",
        "pt": "O GitHub publicou o alerta GHSA-pqg4-j6r4-53mv (crítica). Corrigido em 1.11.0."
      },
      "url": "https://cveboard.org/i/cve-2026-102422",
      "json": "https://cveboard.org/i/cve-2026-102422.json",
      "incident": {
        "title": "shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 59,
      "id": "ghsa:GHSA-8qpj-27x8-pwpq:ghsa_published:2026-10-06T13:38:28.000Z",
      "incidentId": "cve-2026-10561",
      "type": "ghsa_published",
      "at": "2026-10-06T13:38:28.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-8qpj-27x8-pwpq (critical). Fixed in 1.10.1.",
        "pt": "O GitHub publicou o alerta GHSA-8qpj-27x8-pwpq (crítica). Corrigido em 1.10.1."
      },
      "url": "https://cveboard.org/i/cve-2026-10561",
      "json": "https://cveboard.org/i/cve-2026-10561.json",
      "incident": {
        "title": "Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 58,
      "id": "ghsa:GHSA-v5rq-49vh-5v5c:ghsa_published:2026-10-05T23:48:21.000Z",
      "incidentId": "cve-2026-102829",
      "type": "ghsa_published",
      "at": "2026-10-05T23:48:21.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-v5rq-49vh-5v5c (critical). Fixed in 2.0.1.",
        "pt": "O GitHub publicou o alerta GHSA-v5rq-49vh-5v5c (crítica). Corrigido em 2.0.1."
      },
      "url": "https://cveboard.org/i/cve-2026-102829",
      "json": "https://cveboard.org/i/cve-2026-102829.json",
      "incident": {
        "title": "simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 57,
      "id": "ghsa:GHSA-x6jw-m9v5-85vh:ghsa_published:2026-10-05T23:48:14.000Z",
      "incidentId": "cve-2026-102828",
      "type": "ghsa_published",
      "at": "2026-10-05T23:48:14.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-x6jw-m9v5-85vh (critical). Fixed in 4.0.1.",
        "pt": "O GitHub publicou o alerta GHSA-x6jw-m9v5-85vh (crítica). Corrigido em 4.0.1."
      },
      "url": "https://cveboard.org/i/cve-2026-102828",
      "json": "https://cveboard.org/i/cve-2026-102828.json",
      "incident": {
        "title": "simple-git unsafe-operation guard does not block trailer command configuration",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 56,
      "id": "ghsa:GHSA-p6vx-979v-rg4c:ghsa_published:2026-10-05T23:40:43.000Z",
      "incidentId": "cve-2026-104846",
      "type": "ghsa_published",
      "at": "2026-10-05T23:40:43.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-p6vx-979v-rg4c (critical). Fixed in 1.6.2.",
        "pt": "O GitHub publicou o alerta GHSA-p6vx-979v-rg4c (crítica). Corrigido em 1.6.2."
      },
      "url": "https://cveboard.org/i/cve-2026-104846",
      "json": "https://cveboard.org/i/cve-2026-104846.json",
      "incident": {
        "title": "Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 55,
      "id": "ghsa:GHSA-jqcg-44mw-7w3h:ghsa_published:2026-10-05T23:30:26.000Z",
      "incidentId": "cve-2026-90711",
      "type": "ghsa_published",
      "at": "2026-10-05T23:30:26.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-jqcg-44mw-7w3h (critical). Fixed in 2.0.8.",
        "pt": "O GitHub publicou o alerta GHSA-jqcg-44mw-7w3h (crítica). Corrigido em 2.0.8."
      },
      "url": "https://cveboard.org/i/cve-2026-90711",
      "json": "https://cveboard.org/i/cve-2026-90711.json",
      "incident": {
        "title": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 54,
      "id": "ghsa:GHSA-5h3f-q97h-ccvc:ghsa_published:2026-10-05T23:24:29.000Z",
      "incidentId": "cve-2026-100721",
      "type": "ghsa_published",
      "at": "2026-10-05T23:24:29.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-5h3f-q97h-ccvc (critical). Fixed in 3.12.2.",
        "pt": "O GitHub publicou o alerta GHSA-5h3f-q97h-ccvc (crítica). Corrigido em 3.12.2."
      },
      "url": "https://cveboard.org/i/cve-2026-100721",
      "json": "https://cveboard.org/i/cve-2026-100721.json",
      "incident": {
        "title": "vm2: NodeVM custom resolution bypasses external path boundaries",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    },
    {
      "seq": 53,
      "id": "ghsa:GHSA-rvm3-566m-v7fv:ghsa_published:2026-10-05T22:53:10.000Z",
      "incidentId": "cve-2026-103922",
      "type": "ghsa_published",
      "at": "2026-10-05T22:53:10.000Z",
      "text": {
        "en": "GitHub published advisory GHSA-rvm3-566m-v7fv (critical). Fixed in 6.2.2, 7.6.9, 8.5.1, 8.4.3.",
        "pt": "O GitHub publicou o alerta GHSA-rvm3-566m-v7fv (crítica). Corrigido em 6.2.2, 7.6.9, 8.5.1, 8.4.3."
      },
      "url": "https://cveboard.org/i/cve-2026-103922",
      "json": "https://cveboard.org/i/cve-2026-103922.json",
      "incident": {
        "title": "Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",
        "kind": "vuln",
        "knownExploited": false,
        "severity": "critical",
        "retracted": false
      }
    }
  ]
}