{"metadata": {"vulnerability": "CVE-2026-111111", "count": 16, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-10-14T08:01:22Z", "date_only": false, "value": "2026-10-14T08:01:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2342", "record": "CVE-2026-111111", "field": "creation_timestamp", "uuid": "fb5ebe14-fbcc-468a-8a83-524f0b8ae4f0", "content": "\ud83c\udf83 \u041e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434 \u043f\u0430\u0442\u0447\u0435\u043f\u0430\u0434\n\n\u0414\u0430\u0436\u0435 \u0442\u0435\u043c, \u043a\u0442\u043e \u043f\u0440\u0435\u0437\u0438\u0440\u0430\u0435\u0442 \u0425\u044d\u043b\u043b\u043e\u0443\u0438\u043d, \u0435\u0441\u0442\u044c \u0447\u0435\u043c \u0441\u0435\u0431\u044f \u043f\u043e\u043f\u0443\u0433\u0430\u0442\u044c \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u043e\u0432\u044b\u043c\u0438 \u0446\u0438\u0444\u0440\u0430\u043c\u0438 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c CVE ID \u0441 \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u044b\u043c\u0438 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438. Telegram \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0438\u0445 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \ud83e\udd2a. \u041f\u0440\u043e\u0441\u0442\u043e \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u0430: CVE-2026-111111.\n\n\u0412\u0447\u0435\u0440\u0430\u0448\u043d\u0438\u0439 Patch Tuesday \u0442\u043e\u0436\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u0440\u0432\u0430\u043b\u0441\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0442\u0440\u0451\u0445 \u0440\u0430\u0437\u0440\u044f\u0434\u043e\u0432, \u0432 \u043d\u0451\u043c 1414 CVE. \u0412 Microsoft \u043f\u043e\u043d\u044f\u043b\u0438, \u0447\u0442\u043e \u043e\u0441\u043c\u044b\u0441\u043b\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0431\u0430\u0433\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043d\u0435 \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e \u00ab\u043a\u043e\u0433\u043e\u0440\u0442\u0430\u043c \u0440\u0438\u0441\u043a\u0430\u00bb. \u041f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u043e\u0434\u043d\u0438 \u0438 \u0442\u0435 \u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u0433\u043e\u0440\u0442\u044b \u043d\u0435 \u0437\u0430\u043c\u0435\u0449\u0430\u044e\u0442 \u043d\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043d\u0438 \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 CVE. \u042d\u0442\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u0430 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n1102 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Windows, 134 \u2014 Office, 36 \u2014 SharePoint Server, 22 \u2014 SQL server, 7 \u2014 Exchange Server. \u041f\u043e\u0434\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e (677) \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 317 \u2014 RCE, 40 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 73 \u2014 DoS.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 86, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 68 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 14 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 3 \u2014 \u043a \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443 \u0438 1 \u2014 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043e\u0434\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u2014 CVE-2026-96951 (CVSS 8.8) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Windows Shell, \u043e\u043d \u0441\u0443\u0445\u043e \u043e\u043f\u0438\u0441\u0430\u043d \u043a\u0430\u043a \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c. \u0417\u0430 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u0438\u0437 Fujitsu \u0438 Anthropic. \u0412\u0441\u0435 \u044d\u0442\u0438 \u043a\u0443\u0441\u043e\u0447\u043a\u0438 \u043f\u043b\u043e\u0445\u043e \u0441\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0430\u0437\u0437\u043b, \u0436\u0434\u0451\u043c \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430.\n\n\u0420\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f: CVE-2026-108398 (\u0431\u0430\u0433 \u0432 .NET Framework, \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b WDAC) \u0438 CVE-2026-92707 (\u0434\u0435\u0444\u0435\u043a\u0442 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 MessagePack-CSharp, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a DoS).\n\n\u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0438\u0445 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0441 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u0438\u043c\u043f\u0430\u043a\u0442\u043e\u043c, \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2026-65674 (RCE \u0432 SQL Server) -70571 (RCE \u0432 Exchange Server), -70229 (RCE \u0432 AD domain services).\n\n\u0412 Adobe \u043f\u043e \u043c\u0435\u0440\u0435 \u0441\u0438\u043b \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043d\u0435 \u043e\u0442\u0441\u0442\u0430\u0432\u0430\u0442\u044c, \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 174 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVSS 10) \u0432 ColdFusion \u0438 Commerce/Magento. \u042d\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c SAP \u0442\u043e\u0436\u0435 \u043d\u0435 \u0441\u043a\u0443\u0447\u043d\u043e, \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-89111 \u2014 SSRF \u0432 Cloud SDK for Python. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u044f\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0430 CVSS 10, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0433\u043d\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b OAuth.\n\n\u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0432 GitLab \u2014 CVE-2026-97229 (CVSS 10) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 GitLab.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0438 \u0432 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u0445 \u0441\u043b\u043e\u0432\u043e Ivanti, \u043d\u0435 \u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0439\u0442\u0435\u0441\u044c \u2014 \u0432\u0441\u0451 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e, \u0432\u0441\u0451 \u0432 \u043f\u043e\u0440\u044f\u0434\u043a\u0435. \u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f CVE-2026-104935 \u0432 Ivanti Connect Secure \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0415\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u043e\u0439 CVE \u00ab\u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u00bb Docker \u2014 CVE-2026-105445 \u0432 Docker Hub \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0442\u044c \u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (PAT), \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2342"}, {"timestamp": "2026-10-15T15:58:56.096Z", "date_only": false, "value": "2026-10-15T15:58:56.096Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111111", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T16:14:49Z", "date_only": false, "value": "2026-10-15T16:14:49.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-111111", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-27T18:39:01Z", "date_only": false, "value": "2026-10-27T18:39:01.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-111111", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-28T06:45:15.943Z", "date_only": false, "value": "2026-10-28T06:45:15.943Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111111", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:45:15.943Z", "date_only": false, "value": "2026-10-28T06:45:15.943Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-111111", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T07:12:54.531Z", "date_only": false, "value": "2026-10-28T07:12:54.531709Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117517292262096948", "record": "CVE-2026-111111", "field": "creation_timestamp", "uuid": "ae6c4dd0-9f18-4be2-bd2a-381b358daa20", "content": "CVE-2026-111111 Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape The Prime Slider \u2013 Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because core wp_filter_kses leaves the submitted markup inert, but the plugin's subsequent regex fallback consumes closing quotes of allowed attribute values containing 'bdt-', promoting previously inert bytes \u2014 such as event handlers like onfocus \u2014 into real HTML attributes that are then written to the database and rendered without further sanitization.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111111https://www.wordfence.com/threat-intel/vulnerabilities/id/918dd473-dbe7-4352-95e9-3f705b09a4f2?source=cvehttps://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L329https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L292https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L128https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L59https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/loader.php#L133https://plugins.trac.wordpress.org/changeset/3752580/bdthemes-prime-slider-lite/trunk/includes/class-content-guard.php#wordpress #bdthemes #PrimeSlider\u2013HeroSlider,Carousel,WooCommerce&PostSliderElementorAddons#CVE_2026_111111#bot", "url": "https://infosec.exchange/users/cve/statuses/117517292262096948"}, {"timestamp": "2026-10-28T07:16:46Z", "date_only": false, "value": "2026-10-28T07:16:46Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-986P-52GW-J792", "record": "GHSA-986P-52GW-J792", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-28T07:16:46.680Z", "date_only": false, "value": "2026-10-28T07:16:46.680", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111111", "record": "FKIE_CVE-2026-111111", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T09:31:55Z", "date_only": false, "value": "2026-10-28T09:31:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-986P-52GW-J792", "record": "GHSA-986P-52GW-J792", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T09:31:55Z", "date_only": false, "value": "2026-10-28T09:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-986P-52GW-J792", "record": "GHSA-986P-52GW-J792", "field": "modified"}, {"timestamp": "2026-10-29T01:33:58.362Z", "date_only": false, "value": "2026-10-29T01:33:58.362458Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111111", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-29T01:33:58.362Z", "date_only": false, "value": "2026-10-29T01:33:58.362458Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111111", "record": "FKIE_CVE-2026-111111", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-29T01:41:52.430Z", "date_only": false, "value": "2026-10-29T01:41:52.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111111", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T01:41:52.430Z", "date_only": false, "value": "2026-10-29T01:41:52.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111111", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T02:16:49.230Z", "date_only": false, "value": "2026-10-29T02:16:49.230", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111111", "record": "FKIE_CVE-2026-111111", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T13:24:04.819Z", "anchors": {"origin": {"timestamp": "2026-10-28T06:45:15.943Z", "date_only": false, "value": "2026-10-28T06:45:15.943Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111111", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T06:45:15.943Z", "date_only": false, "value": "2026-10-28T06:45:15.943Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111111", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 283128.876098, "hours": 78.64691002722222, "days": 3.2769545844675925, "min_seconds": 283128.876098, "max_seconds": 283128.876098, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T06:45:15.943Z", "date_only": false, "value": "2026-10-28T06:45:15.943Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111111", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T13:24:04.819Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}