Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities found for Multiload II+ by Toptech Systems

    CVE-2026-12562 (GCVE-0-2026-12562)

    Vulnerability from nvd – Published: 2026-07-30 21:29 – Updated: 2026-07-31 15:39
    VLAI
    Title
    Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function
    Summary
    The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework (TCF) service that does not require any authentication, allowing an attacker to directly interact with the Linux environment that powers the device. Once connected, an attacker can freely view and modify the filesystem, manipulate running processes, and control network interfaces, enabling deep alteration of system behavior.
    Severity
    8.8 (High)
    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.7 (High)
    CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Toptech Systems RCU II+ Affected: 0 , < 2025-11-24 (custom)
    		Create a notification for this product.
    Toptech Systems Multiload II+ Affected: 0 , < 2025-11-24 (custom)
    		Create a notification for this product.
    Credits
    Donald Green of Southwest Research Institute reported this vulnerability to CISA.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12562",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-31T15:39:39.902412Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-31T15:39:49.359Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RCU II+",
          "vendor": "Toptech Systems",
          "versions": [
            {
              "lessThan": "2025-11-24",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Multiload II+",
          "vendor": "Toptech Systems",
          "versions": [
            {
              "lessThan": "2025-11-24",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Donald Green of Southwest Research Institute reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
            }
          ],
          "value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T23:58:13.132Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip"
        },
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz"
        },
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/"
        },
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-03.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eToptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\u003c/a\u003e,\n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\"\u003e \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\u003c/a\u003e.\n \u003c/div\u003e\u003cul\u003e\u003cli\u003eThis option does not require breaking Weights and Measures seals and has the least operational impact.\u003c/li\u003e\u003c/ul\u003eInstall the latest firmware from \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\u003c/a\u003e.\n \u003cul\u003e\u003cli\u003eThis method requires stopping the bay and breaking the W\u0026amp;M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\u003c/li\u003e\u003c/ul\u003e\u003cdiv\u003e\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\u003c/a\u003e.\n\n\u003c/div\u003e"
            }
          ],
          "value": "Toptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\n\n\n\n\nRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip ,\n \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz.\n \n\n  *  This option does not require breaking Weights and Measures seals and has the least operational impact.\n\n\nInstall the latest firmware from \n https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/ .\n   *  This method requires stopping the bay and breaking the W\u0026M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\n\n\n\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf ."
        }
      ],
      "source": {
        "advisory": "ICSA-26-211-03",
        "discovery": "EXTERNAL"
      },
      "title": "Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-12562",
    "datePublished": "2026-07-30T21:29:35.378Z",
    "dateReserved": "2026-06-17T20:31:31.583Z",
    "dateUpdated": "2026-07-31T15:39:49.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-12562 (GCVE-0-2026-12562)

    Vulnerability from cvelistv5 – Published: 2026-07-30 21:29 – Updated: 2026-07-31 15:39
    VLAI
    Title
    Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function
    Summary
    The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework (TCF) service that does not require any authentication, allowing an attacker to directly interact with the Linux environment that powers the device. Once connected, an attacker can freely view and modify the filesystem, manipulate running processes, and control network interfaces, enabling deep alteration of system behavior.
    Severity
    8.8 (High)
    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.7 (High)
    CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Toptech Systems RCU II+ Affected: 0 , < 2025-11-24 (custom)
    		Create a notification for this product.
    Toptech Systems Multiload II+ Affected: 0 , < 2025-11-24 (custom)
    		Create a notification for this product.
    Credits
    Donald Green of Southwest Research Institute reported this vulnerability to CISA.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12562",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-31T15:39:39.902412Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-31T15:39:49.359Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RCU II+",
          "vendor": "Toptech Systems",
          "versions": [
            {
              "lessThan": "2025-11-24",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Multiload II+",
          "vendor": "Toptech Systems",
          "versions": [
            {
              "lessThan": "2025-11-24",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Donald Green of Southwest Research Institute reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
            }
          ],
          "value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T23:58:13.132Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip"
        },
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz"
        },
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/"
        },
        {
          "url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-03.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eToptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\u003c/a\u003e,\n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\"\u003e \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\u003c/a\u003e.\n \u003c/div\u003e\u003cul\u003e\u003cli\u003eThis option does not require breaking Weights and Measures seals and has the least operational impact.\u003c/li\u003e\u003c/ul\u003eInstall the latest firmware from \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\u003c/a\u003e.\n \u003cul\u003e\u003cli\u003eThis method requires stopping the bay and breaking the W\u0026amp;M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\u003c/li\u003e\u003c/ul\u003e\u003cdiv\u003e\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\u003c/a\u003e.\n\n\u003c/div\u003e"
            }
          ],
          "value": "Toptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\n\n\n\n\nRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip ,\n \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz.\n \n\n  *  This option does not require breaking Weights and Measures seals and has the least operational impact.\n\n\nInstall the latest firmware from \n https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/ .\n   *  This method requires stopping the bay and breaking the W\u0026M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\n\n\n\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf ."
        }
      ],
      "source": {
        "advisory": "ICSA-26-211-03",
        "discovery": "EXTERNAL"
      },
      "title": "Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-12562",
    "datePublished": "2026-07-30T21:29:35.378Z",
    "dateReserved": "2026-06-17T20:31:31.583Z",
    "dateUpdated": "2026-07-31T15:39:49.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}