[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-19977":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-17T10:37:26.669Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":660,"aliases":670,"duplicate_of":9,"upstream":671,"downstream":672,"duplicates":673,"related":674,"reserved_at":9,"published_at":675,"modified_at":675,"state":676,"summary":677,"references_raw":683,"kevs":711,"epss":9,"epss_history":712,"metrics":713,"affected":731},"CVE-2026-19977","A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","weakness","Draft","Class","High",[20,182,261,265,269,273,292,481,543,627],{"id":21,"name":22,"techniques":23},"CAPEC-114","Authentication Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,45,50,55,59,63,67,72,76,80,84,88,92,96,100,104,109,113,117,121,126,130,134,138,142,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-CM","Content Modification",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-AEM","Application Exception Monitoring",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-DF","Decoy File",{"name":49},"Deceive",{"id":51,"name":52,"tactic":53},"D3-CI","Configuration Inventory",{"name":54},"Model",{"id":56,"name":57,"tactic":58},"D3-SCA","System Call Analysis",{"name":44},{"id":60,"name":61,"tactic":62},"D3-SFA","System File Analysis",{"name":44},{"id":64,"name":65,"tactic":66},"D3-FA","File Analysis",{"name":44},{"id":68,"name":69,"tactic":70},"D3-FE","File Encryption",{"name":71},"Harden",{"id":73,"name":74,"tactic":75},"D3-AA","Agent Authentication",{"name":71},{"id":77,"name":78,"tactic":79},"D3-CDP","Change Default Password",{"name":71},{"id":81,"name":82,"tactic":83},"D3-AM","Access Modeling",{"name":54},{"id":85,"name":86,"tactic":87},"D3-DI","Data Inventory",{"name":54},{"id":89,"name":90,"tactic":91},"D3-NTPM","Network Traffic Policy Mapping",{"name":54},{"id":93,"name":94,"tactic":95},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":97,"name":98,"tactic":99},"D3-SCP","System Configuration Permissions",{"name":71},{"id":101,"name":102,"tactic":103},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":105,"name":106,"tactic":107},"D3-RC","Restore Configuration",{"name":108},"Restore",{"id":110,"name":111,"tactic":112},"D3-RF","Restore File",{"name":108},{"id":114,"name":115,"tactic":116},"D3-ULA","Unlock Account",{"name":108},{"id":118,"name":119,"tactic":120},"D3-RUAA","Restore User Account Access",{"name":108},{"id":122,"name":123,"tactic":124},"D3-FEV","File Eviction",{"name":125},"Evict",{"id":127,"name":128,"tactic":129},"D3-RD","Restore Database",{"name":108},{"id":131,"name":132,"tactic":133},"D3-AL","Account Locking",{"name":125},{"id":135,"name":136,"tactic":137},"D3-OPM","Operational Process Monitoring",{"name":44},{"id":139,"name":140,"tactic":141},"D3-DA","Dynamic Analysis",{"name":44},{"id":143,"name":144,"tactic":145},"D3-EFA","Emulated File Analysis",{"name":44},{"id":147,"name":148,"tactic":149},"D3-SCF","System Call Filtering",{"name":39},{"id":151,"name":152,"tactic":153},"D3-CF","Content Filtering",{"name":39},{"id":155,"name":156,"tactic":157},"D3-LFP","Local File Permissions",{"name":39},{"id":159,"name":160,"tactic":161},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":39},{"id":167,"name":168,"tactic":169},"D3-UAP","User Account Permissions",{"name":39},{"id":171,"name":172,"tactic":173},"D3-HBPI","Hardware-based Process Isolation",{"name":39},{"id":175,"name":176,"tactic":177},"D3-EAL","Executable Allowlisting",{"name":39},{"id":179,"name":180,"tactic":181},"D3-EDL","Executable Denylisting",{"name":39},{"id":183,"name":184,"techniques":185},"CAPEC-115","Authentication Bypass",[186],{"id":25,"name":26,"tactics":187,"countermeasures":190},[188,189],{"id":29,"name":30},{"id":32,"name":33},[191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"id":36,"name":37,"tactic":192},{"name":39},{"id":41,"name":42,"tactic":194},{"name":44},{"id":46,"name":47,"tactic":196},{"name":49},{"id":51,"name":52,"tactic":198},{"name":54},{"id":56,"name":57,"tactic":200},{"name":44},{"id":60,"name":61,"tactic":202},{"name":44},{"id":64,"name":65,"tactic":204},{"name":44},{"id":68,"name":69,"tactic":206},{"name":71},{"id":73,"name":74,"tactic":208},{"name":71},{"id":77,"name":78,"tactic":210},{"name":71},{"id":81,"name":82,"tactic":212},{"name":54},{"id":85,"name":86,"tactic":214},{"name":54},{"id":89,"name":90,"tactic":216},{"name":54},{"id":93,"name":94,"tactic":218},{"name":44},{"id":97,"name":98,"tactic":220},{"name":71},{"id":101,"name":102,"tactic":222},{"name":44},{"id":105,"name":106,"tactic":224},{"name":108},{"id":110,"name":111,"tactic":226},{"name":108},{"id":114,"name":115,"tactic":228},{"name":108},{"id":118,"name":119,"tactic":230},{"name":108},{"id":122,"name":123,"tactic":232},{"name":125},{"id":127,"name":128,"tactic":234},{"name":108},{"id":131,"name":132,"tactic":236},{"name":125},{"id":135,"name":136,"tactic":238},{"name":44},{"id":139,"name":140,"tactic":240},{"name":44},{"id":143,"name":144,"tactic":242},{"name":44},{"id":147,"name":148,"tactic":244},{"name":39},{"id":151,"name":152,"tactic":246},{"name":39},{"id":155,"name":156,"tactic":248},{"name":39},{"id":159,"name":160,"tactic":250},{"name":39},{"id":163,"name":164,"tactic":252},{"name":39},{"id":167,"name":168,"tactic":254},{"name":39},{"id":171,"name":172,"tactic":256},{"name":39},{"id":175,"name":176,"tactic":258},{"name":39},{"id":179,"name":180,"tactic":260},{"name":39},{"id":262,"name":263,"techniques":264},"CAPEC-151","Identity Spoofing",[],{"id":266,"name":267,"techniques":268},"CAPEC-194","Fake the Source of Data",[],{"id":270,"name":271,"techniques":272},"CAPEC-22","Exploiting Trust in Client",[],{"id":274,"name":275,"techniques":276},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[277],{"id":278,"name":279,"tactics":280,"countermeasures":287},"T1040","Network Sniffing",[281,284],{"id":282,"name":283},"TA0031","Credential Access",{"id":285,"name":286},"TA0102","Discovery",[288],{"id":289,"name":290,"tactic":291},"D3-DNSTA","DNS Traffic Analysis",{"name":44},{"id":293,"name":294,"techniques":295},"CAPEC-593","Session Hijacking",[296,340,453],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1185","Browser Session Hijacking",[300],{"id":301,"name":302},"TA0100","Collection",[304,308,312,316,320,324,328,332,336],{"id":305,"name":306,"tactic":307},"D3-NTF","Network Traffic Filtering",{"name":39},{"id":309,"name":310,"tactic":311},"D3-NTSA","Network Traffic Signature Analysis",{"name":44},{"id":313,"name":314,"tactic":315},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":44},{"id":317,"name":318,"tactic":319},"D3-APCA","Application Protocol Command Analysis",{"name":44},{"id":321,"name":322,"tactic":323},"D3-NTCD","Network Traffic Community Deviation",{"name":44},{"id":325,"name":326,"tactic":327},"D3-RTSD","Remote Terminal Session Detection",{"name":44},{"id":329,"name":330,"tactic":331},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":44},{"id":333,"name":334,"tactic":335},"D3-CSPP","Client-server Payload Profiling",{"name":44},{"id":337,"name":338,"tactic":339},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":44},{"id":341,"name":342,"tactics":343,"countermeasures":348},"T1550.001","Application Access Token",[344,345],{"id":29,"name":30},{"id":346,"name":347},"TA0109","Lateral Movement",[349,353,355,359,361,365,367,371,375,379,383,387,391,393,395,399,403,405,409,413,415,419,421,425,429,431,435,439,443,445,449,451],{"id":350,"name":351,"tactic":352},"D3-PS","Process Suspension",{"name":125},{"id":317,"name":318,"tactic":354},{"name":44},{"id":356,"name":357,"tactic":358},"D3-MFA","Multi-factor Authentication",{"name":71},{"id":329,"name":330,"tactic":360},{"name":44},{"id":362,"name":363,"tactic":364},"D3-PT","Process Termination",{"name":125},{"id":93,"name":94,"tactic":366},{"name":44},{"id":368,"name":369,"tactic":370},"D3-CH","Credential Hardening",{"name":71},{"id":372,"name":373,"tactic":374},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":376,"name":377,"tactic":378},"D3-CR","Credential Revocation",{"name":125},{"id":380,"name":381,"tactic":382},"D3-ANCI","Authentication Cache Invalidation",{"name":125},{"id":384,"name":385,"tactic":386},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":388,"name":389,"tactic":390},"D3-KBPI","Kernel-based Process Isolation",{"name":39},{"id":147,"name":148,"tactic":392},{"name":39},{"id":171,"name":172,"tactic":394},{"name":39},{"id":396,"name":397,"tactic":398},"D3-ABPI","Application-based Process Isolation",{"name":39},{"id":400,"name":401,"tactic":402},"D3-CTS","Credential Transmission Scoping",{"name":39},{"id":337,"name":338,"tactic":404},{"name":44},{"id":406,"name":407,"tactic":408},"D3-DUC","Decoy User Credential",{"name":49},{"id":410,"name":411,"tactic":412},"D3-WSAM","Web Session Access Mediation",{"name":39},{"id":325,"name":326,"tactic":414},{"name":44},{"id":416,"name":417,"tactic":418},"D3-CCSA","Credential Compromise Scope Analysis",{"name":44},{"id":321,"name":322,"tactic":420},{"name":44},{"id":422,"name":423,"tactic":424},"D3-RIC","Reissue Credential",{"name":108},{"id":426,"name":427,"tactic":428},"D3-TBA","Token-based Authentication",{"name":71},{"id":313,"name":314,"tactic":430},{"name":44},{"id":432,"name":433,"tactic":434},"D3-TB","Token Binding",{"name":71},{"id":436,"name":437,"tactic":438},"D3-HR","Host Reboot",{"name":125},{"id":440,"name":441,"tactic":442},"D3-HS","Host Shutdown",{"name":125},{"id":305,"name":306,"tactic":444},{"name":39},{"id":446,"name":447,"tactic":448},"D3-CRO","Credential Rotation",{"name":71},{"id":309,"name":310,"tactic":450},{"name":44},{"id":333,"name":334,"tactic":452},{"name":44},{"id":454,"name":455,"tactics":456,"countermeasures":458},"T1563","Remote Service Session Hijacking",[457],{"id":346,"name":347},[459,461,463,465,469,471,473,475,477,479],{"id":309,"name":310,"tactic":460},{"name":44},{"id":325,"name":326,"tactic":462},{"name":44},{"id":333,"name":334,"tactic":464},{"name":44},{"id":466,"name":467,"tactic":468},"D3-ST","Session Termination",{"name":125},{"id":317,"name":318,"tactic":470},{"name":44},{"id":329,"name":330,"tactic":472},{"name":44},{"id":305,"name":306,"tactic":474},{"name":39},{"id":321,"name":322,"tactic":476},{"name":44},{"id":337,"name":338,"tactic":478},{"name":44},{"id":313,"name":314,"tactic":480},{"name":44},{"id":482,"name":483,"techniques":484},"CAPEC-633","Token Impersonation",[485],{"id":486,"name":487,"tactics":488,"countermeasures":494},"T1134","Access Token Manipulation",[489,490,493],{"id":29,"name":30},{"id":491,"name":492},"TA0005","Stealth",{"id":32,"name":33},[495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541],{"id":400,"name":401,"tactic":496},{"name":39},{"id":416,"name":417,"tactic":498},{"name":44},{"id":135,"name":136,"tactic":500},{"name":44},{"id":93,"name":94,"tactic":502},{"name":44},{"id":466,"name":467,"tactic":504},{"name":125},{"id":376,"name":377,"tactic":506},{"name":125},{"id":380,"name":381,"tactic":508},{"name":125},{"id":51,"name":52,"tactic":510},{"name":54},{"id":406,"name":407,"tactic":512},{"name":49},{"id":368,"name":369,"tactic":514},{"name":71},{"id":171,"name":172,"tactic":516},{"name":39},{"id":356,"name":357,"tactic":518},{"name":71},{"id":446,"name":447,"tactic":520},{"name":71},{"id":432,"name":433,"tactic":522},{"name":71},{"id":426,"name":427,"tactic":524},{"name":71},{"id":105,"name":106,"tactic":526},{"name":108},{"id":422,"name":423,"tactic":528},{"name":108},{"id":89,"name":90,"tactic":530},{"name":54},{"id":81,"name":82,"tactic":532},{"name":54},{"id":147,"name":148,"tactic":534},{"name":39},{"id":41,"name":42,"tactic":536},{"name":44},{"id":56,"name":57,"tactic":538},{"name":44},{"id":175,"name":176,"tactic":540},{"name":39},{"id":179,"name":180,"tactic":542},{"name":39},{"id":544,"name":545,"techniques":546},"CAPEC-650","Upload a Web Shell to a Web Server",[547],{"id":548,"name":549,"tactics":550,"countermeasures":554},"T1505.003","Web Shell",[551],{"id":552,"name":553},"TA0110","Persistence",[555,557,559,561,563,567,571,573,575,577,579,581,583,585,589,591,593,595,597,599,601,603,605,607,609,611,613,615,617,621,625],{"id":68,"name":69,"tactic":556},{"name":71},{"id":396,"name":397,"tactic":558},{"name":39},{"id":46,"name":47,"tactic":560},{"name":49},{"id":384,"name":385,"tactic":562},{"name":44},{"id":564,"name":565,"tactic":566},"D3-PLM","Physical Link Mapping",{"name":54},{"id":568,"name":569,"tactic":570},"D3-LLM","Logical Link Mapping",{"name":54},{"id":139,"name":140,"tactic":572},{"name":44},{"id":101,"name":102,"tactic":574},{"name":44},{"id":179,"name":180,"tactic":576},{"name":39},{"id":388,"name":389,"tactic":578},{"name":39},{"id":143,"name":144,"tactic":580},{"name":44},{"id":362,"name":363,"tactic":582},{"name":125},{"id":163,"name":164,"tactic":584},{"name":39},{"id":586,"name":587,"tactic":588},"D3-EHB","Endpoint Health Beacon",{"name":44},{"id":147,"name":148,"tactic":590},{"name":39},{"id":151,"name":152,"tactic":592},{"name":39},{"id":372,"name":373,"tactic":594},{"name":44},{"id":36,"name":37,"tactic":596},{"name":39},{"id":350,"name":351,"tactic":598},{"name":125},{"id":175,"name":176,"tactic":600},{"name":39},{"id":122,"name":123,"tactic":602},{"name":125},{"id":93,"name":94,"tactic":604},{"name":44},{"id":159,"name":160,"tactic":606},{"name":39},{"id":436,"name":437,"tactic":608},{"name":125},{"id":110,"name":111,"tactic":610},{"name":108},{"id":440,"name":441,"tactic":612},{"name":125},{"id":171,"name":172,"tactic":614},{"name":39},{"id":64,"name":65,"tactic":616},{"name":44},{"id":618,"name":619,"tactic":620},"D3-NNI","Network Node Inventory",{"name":54},{"id":622,"name":623,"tactic":624},"D3-RNA","Restore Network Access",{"name":108},{"id":155,"name":156,"tactic":626},{"name":39},{"id":628,"name":629,"techniques":630},"CAPEC-94","Adversary in the Middle (AiTM)",[631],{"id":632,"name":633,"tactics":634,"countermeasures":637},"T1557","Adversary-in-the-Middle",[635,636],{"id":282,"name":283},{"id":301,"name":302},[638,640,642,644,646,648,650,652,654,656],{"id":305,"name":306,"tactic":639},{"name":39},{"id":313,"name":314,"tactic":641},{"name":44},{"id":329,"name":330,"tactic":643},{"name":44},{"id":333,"name":334,"tactic":645},{"name":44},{"id":337,"name":338,"tactic":647},{"name":44},{"id":309,"name":310,"tactic":649},{"name":44},{"id":317,"name":318,"tactic":651},{"name":44},{"id":321,"name":322,"tactic":653},{"name":44},{"id":325,"name":326,"tactic":655},{"name":44},{"id":657,"name":658,"tactic":659},"D3-CAA","Connection Attempt Analysis",{"name":44},[661],{"_key":662,"name":663,"source":664,"url":665,"maturity":666,"reliability_score":667,"verified":668,"type":9,"platforms":669,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_ADMINSAFE_CVE","Cve","github","https://github.com/AdminSafe/CVE/issues/1","poc",0.3,false,[],[],[],[],[],[],"2026-08-17T03:00:09.815Z","Received",{"cisa_kev":668,"cisa_ransomware":668,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":678,"severity_score":679,"severity_version":680,"severity_source":681,"severity_vector":682,"severity_status":676},"critical",10,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",[684,691,697,702,706],{"url":685,"sources":686,"tags":688},"https://vuldb.com/vuln/391156",[681,687],"nvd",[689,690],"VDB Entry","Technical Description",{"url":692,"sources":693,"tags":694},"https://vuldb.com/vuln/391156/cti",[681,687],[695,696],"Signature","Permissions Required",{"url":698,"sources":699,"tags":700},"https://vuldb.com/cve/CVE-2026-19977",[681,687],[701],"Third Party Advisory",{"url":703,"sources":704,"tags":705},"https://vuldb.com/submit/873848",[681,687],[701],{"url":665,"sources":707,"tags":708},[681,687],[709,710],"Exploit","Issue Tracking",[],[],[714,723],{"source":681,"cvss_v2_0":715,"cvss_v3_0":717,"cvss_v3_1":720,"cvss_v4_0":722},{"baseScore":679,"baseSeverity":9,"vectorString":716,"impactScore":679,"exploitabilityScore":679},"AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",{"baseScore":679,"baseSeverity":718,"vectorString":719,"impactScore":679,"exploitabilityScore":679},"CRITICAL","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",{"baseScore":679,"baseSeverity":718,"vectorString":721,"impactScore":679,"exploitabilityScore":679},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",{"baseScore":679,"baseSeverity":718,"vectorString":682,"impactScore":9,"exploitabilityScore":9},{"source":687,"cvss_v2_0":724,"cvss_v3_0":9,"cvss_v3_1":726,"cvss_v4_0":728},{"baseScore":679,"baseSeverity":9,"vectorString":725,"impactScore":679,"exploitabilityScore":679},"AV:N/AC:L/Au:N/C:C/I:C/A:C",{"baseScore":679,"baseSeverity":718,"vectorString":727,"impactScore":679,"exploitabilityScore":679},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",{"baseScore":729,"baseSeverity":718,"vectorString":730,"impactScore":9,"exploitabilityScore":9},9.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[732],{"ecosystem":9,"name":733,"vendor":734,"product":735,"cpe_part":736,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":737},"ipTIME A3004T","efm","iptime a3004t","a",[738],{"version":739,"is_range":668,"range_type":681,"version_start":739,"version_start_type":740,"version_end":739,"version_end_type":740,"fixed_in":9},"14.19.0","including"]