CVE-2026-105985 (GCVE-0-2026-105985)

Vulnerability from cvelistv5 – Published: 2026-10-06 10:23 – Updated: 2026-10-06 10:53
VLAI
Title
Authenticated RCE via render-components Entry Type overrides
Summary
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding an EntryType object’s uiLabelFormat and then rendering an Entry that resolves the same request-cached entry type, an attacker can cause arbitrary Twig supplied in the request to be evaluated by renderObjectTemplate(). This render path is not sandboxed. A Twig string callable can therefore reach PHP functions such as system(), resulting in operating-system command execution with the privileges of the PHP/web-server process. The issue was reproduced with an active non-admin Craft Team user with no optional permissions enabled. No access to entry-editing, Settings, utility, user-management, project-config, filesystem, Kubernetes, or environment variables was required.
Severity
8.7 (High)
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-06 10:53 UTC
CWE
  • CWE-1336 - Improper neutralization of special elements used in a template engine
Assigner
References
Impacted products
Vendor Product Version CPE status
craftcms cms Affected: 5.0.0 , < 5.11.0 (semver)
    cpe:2.3:a:craftcms:cms:*:*:*:*:*:*:*:*
Create a notification for this product.
Credits
@allblue Hackrate
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-105985",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T10:53:19.233279Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T10:53:27.239Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://packagist.org",
          "defaultStatus": "unaffected",
          "packageName": "craftcms/cms",
          "product": "cms",
          "vendor": "craftcms",
          "versions": [
            {
              "lessThan": "5.11.0",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:craftcms:cms:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.0",
                  "versionStartIncluding": "5.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "@allblue"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Hackrate"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCraft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action\u0026nbsp;\u003ccode\u003eapp/render-components\u003c/code\u003e.\u003c/p\u003e\u003cp\u003eAny authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding an\u0026nbsp;\u003ccode\u003eEntryType\u003c/code\u003e\u0026nbsp;object\u2019s\u0026nbsp;\u003ccode\u003euiLabelFormat\u003c/code\u003e\u0026nbsp;and then rendering an Entry that resolves the same request-cached entry type, an attacker can cause arbitrary Twig supplied in the request to be evaluated by\u0026nbsp;\u003ccode\u003erenderObjectTemplate()\u003c/code\u003e.\u003c/p\u003e\u003cp\u003eThis render path is not sandboxed. A Twig string callable can therefore reach PHP functions such as\u0026nbsp;\u003ccode\u003esystem()\u003c/code\u003e, resulting in operating-system command execution with the privileges of the PHP/web-server process.\u003c/p\u003e\u003cp\u003eThe issue was reproduced with an active non-admin Craft Team user with no optional permissions enabled. No access to entry-editing, Settings, utility, user-management, project-config, filesystem, Kubernetes, or environment variables was required.\u003c/p\u003e"
            }
          ],
          "value": "Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action\u00a0app/render-components.\n\n\n\nAny authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding an\u00a0EntryType\u00a0object\u2019s\u00a0uiLabelFormat\u00a0and then rendering an Entry that resolves the same request-cached entry type, an attacker can cause arbitrary Twig supplied in the request to be evaluated by\u00a0renderObjectTemplate().\n\n\n\nThis render path is not sandboxed. A Twig string callable can therefore reach PHP functions such as\u00a0system(), resulting in operating-system command execution with the privileges of the PHP/web-server process.\n\n\n\nThe issue was reproduced with an active non-admin Craft Team user with no optional permissions enabled. No access to entry-editing, Settings, utility, user-management, project-config, filesystem, Kubernetes, or environment variables was required."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1336",
              "description": "CWE-1336 Improper neutralization of special elements used in a template engine",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T10:23:25.037Z",
        "orgId": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
        "shortName": "Hackrate"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory",
            "technical-description",
            "mitigation"
          ],
          "url": "https://www.hckrt.com/hacktivity/HCKRT-PVWH7W"
        },
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/craftcms/cms/releases/tag/5.11.0"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/craftcms/cms"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://github.com/craftcms/cms/security/advisories/GHSA-g48f-wc2q-4rrv"
        }
      ],
      "source": {
        "advisory": "GHSA-g48f-wc2q-4rrv",
        "discovery": "UNKNOWN"
      },
      "title": "Authenticated RCE via render-components Entry Type overrides",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
    "assignerShortName": "Hackrate",
    "cveId": "CVE-2026-105985",
    "datePublished": "2026-10-06T10:23:25.037Z",
    "dateReserved": "2026-10-06T10:08:10.713Z",
    "dateUpdated": "2026-10-06T10:53:27.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "collectionURL": "https://packagist.org",
                "defaultStatus": "unaffected",
                "packageName": "craftcms/cms",
                "product": "cms",
                "vendor": "craftcms",
                "versions": [
                  {
                    "lessThan": "5.11.0",
                    "status": "affected",
                    "version": "5.0.0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action\u00a0app/render-components.\n\n\n\nAny authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding an\u00a0EntryType\u00a0object\u2019s\u00a0uiLabelFormat\u00a0and then rendering an Entry that resolves the same request-cached entry type, an attacker can cause arbitrary Twig supplied in the request to be evaluated by\u00a0renderObjectTemplate().\n\n\n\nThis render path is not sandboxed. A Twig string callable can therefore reach PHP functions such as\u00a0system(), resulting in operating-system command execution with the privileges of the PHP/web-server process.\n\n\n\nThe issue was reproduced with an active non-admin Craft Team user with no optional permissions enabled. No access to entry-editing, Settings, utility, user-management, project-config, filesystem, Kubernetes, or environment variables was required."
          }
        ],
        "id": "CVE-2026-105985",
        "lastModified": "2026-10-06T15:18:12.170",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.9,
              "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-105985",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T10:53:19.233279Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-06T11:17:16.857",
        "references": [
          {
            "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
            "url": "https://github.com/craftcms/cms"
          },
          {
            "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
            "url": "https://github.com/craftcms/cms/releases/tag/5.11.0"
          },
          {
            "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
            "url": "https://github.com/craftcms/cms/security/advisories/GHSA-g48f-wc2q-4rrv"
          },
          {
            "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
            "url": "https://www.hckrt.com/hacktivity/HCKRT-PVWH7W"
          }
        ],
        "sourceIdentifier": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-1336"
              }
            ],
            "source": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-105985",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-06T10:53:19.233279Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-06T10:53:23.808Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://packagist.org",
              "defaultStatus": "unaffected",
              "packageName": "craftcms/cms",
              "product": "cms",
              "vendor": "craftcms",
              "versions": [
                {
                  "lessThan": "5.11.0",
                  "status": "affected",
                  "version": "5.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:craftcms:cms:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.11.0",
                      "versionStartIncluding": "5.0.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ],
              "operator": "OR"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "@allblue"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "Hackrate"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCraft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action\u0026nbsp;\u003ccode\u003eapp/render-components\u003c/code\u003e.\u003c/p\u003e\u003cp\u003eAny authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding an\u0026nbsp;\u003ccode\u003eEntryType\u003c/code\u003e\u0026nbsp;object\u2019s\u0026nbsp;\u003ccode\u003euiLabelFormat\u003c/code\u003e\u0026nbsp;and then rendering an Entry that resolves the same request-cached entry type, an attacker can cause arbitrary Twig supplied in the request to be evaluated by\u0026nbsp;\u003ccode\u003erenderObjectTemplate()\u003c/code\u003e.\u003c/p\u003e\u003cp\u003eThis render path is not sandboxed. A Twig string callable can therefore reach PHP functions such as\u0026nbsp;\u003ccode\u003esystem()\u003c/code\u003e, resulting in operating-system command execution with the privileges of the PHP/web-server process.\u003c/p\u003e\u003cp\u003eThe issue was reproduced with an active non-admin Craft Team user with no optional permissions enabled. No access to entry-editing, Settings, utility, user-management, project-config, filesystem, Kubernetes, or environment variables was required.\u003c/p\u003e"
                }
              ],
              "value": "Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action\u00a0app/render-components.\n\n\n\nAny authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding an\u00a0EntryType\u00a0object\u2019s\u00a0uiLabelFormat\u00a0and then rendering an Entry that resolves the same request-cached entry type, an attacker can cause arbitrary Twig supplied in the request to be evaluated by\u00a0renderObjectTemplate().\n\n\n\nThis render path is not sandboxed. A Twig string callable can therefore reach PHP functions such as\u00a0system(), resulting in operating-system command execution with the privileges of the PHP/web-server process.\n\n\n\nThe issue was reproduced with an active non-admin Craft Team user with no optional permissions enabled. No access to entry-editing, Settings, utility, user-management, project-config, filesystem, Kubernetes, or environment variables was required."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1336",
                  "description": "CWE-1336 Improper neutralization of special elements used in a template engine",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-06T10:23:25.037Z",
            "orgId": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
            "shortName": "Hackrate"
          },
          "references": [
            {
              "tags": [
                "third-party-advisory",
                "technical-description",
                "mitigation"
              ],
              "url": "https://www.hckrt.com/hacktivity/HCKRT-PVWH7W"
            },
            {
              "tags": [
                "release-notes"
              ],
              "url": "https://github.com/craftcms/cms/releases/tag/5.11.0"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://github.com/craftcms/cms"
            },
            {
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://github.com/craftcms/cms/security/advisories/GHSA-g48f-wc2q-4rrv"
            }
          ],
          "source": {
            "advisory": "GHSA-g48f-wc2q-4rrv",
            "discovery": "UNKNOWN"
          },
          "title": "Authenticated RCE via render-components Entry Type overrides",
          "x_generator": {
            "engine": "Vulnogram 1.0.4"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "7004884b-51e2-48e8-b4a2-5ca29e80453e",
        "assignerShortName": "Hackrate",
        "cveId": "CVE-2026-105985",
        "datePublished": "2026-10-06T10:23:25.037Z",
        "dateReserved": "2026-10-06T10:08:10.713Z",
        "dateUpdated": "2026-10-06T10:53:27.239Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.