{"schemaVersion":3,"id":"CVE-2026-27965","aliases":["GHSA-8g8j-r87h-p36x","GO-2026-4567","CGA-2284-29w5-8h6q","CGA-22c8-gcvf-67c5","CGA-22qp-vq92-9hh5","CGA-242v-mf7x-mxq9","CGA-2799-vvf9-9m3w","CGA-27fp-3r7c-554r","CGA-29x6-fr36-499r","CGA-2g27-9648-h99x","CGA-2jch-rmr6-h4f2","CGA-2xrv-xpqr-5h45","CGA-33hc-h985-r264","CGA-365f-f8hm-8q8q","CGA-386q-qq7h-8h7q","CGA-38q7-m22v-fmcc","CGA-3f39-5j9m-r2xw","CGA-3fjm-fw47-p3xh","CGA-3pvj-mvhv-7mv5","CGA-3px2-wwvm-mqvj","CGA-3q7v-r8qm-5w5q","CGA-3qvx-hpjp-vr37","CGA-3xhx-gpxp-g3jq","CGA-42v2-83rx-34pp","CGA-43fr-gp6f-wvrp","CGA-4789-vwpj-9847","CGA-48vw-mqrp-fwc7","CGA-48xj-45hw-x8hg","CGA-4f5x-frh2-rvqm","CGA-4f8r-5pf3-9x9x","CGA-4gv8-7h7x-m75p","CGA-4gvx-25w3-jc7f","CGA-4p4g-hrfv-mvmm","CGA-4qf7-vqgv-76j3","CGA-4qq7-f929-p386","CGA-4r3j-939m-mrm7","CGA-4rgq-666f-m5gf","CGA-4wqm-43hq-93vf","CGA-542r-rhhh-8gfc","CGA-54xh-5jq4-9fqg","CGA-55ff-8qrj-95qx","CGA-55ff-fg8m-f59f","CGA-5752-rfc4-8x5h","CGA-59pj-frj6-7fhv","CGA-5cjh-xh9p-wh6w","CGA-5jqv-c286-fjcf","CGA-5qvf-3xm5-v226","CGA-5rq8-3w2c-hv27","CGA-5wc8-3pqg-7hm4","CGA-62w6-vp24-vvjg","CGA-63jv-rhfj-5g7f","CGA-63px-8rv5-5vjw","CGA-6422-c95m-jwmg","CGA-66xv-chqq-w7c9","CGA-6f89-8vcj-v376","CGA-6hpr-jq3w-f2rv","CGA-6j5x-q5gg-7h27","CGA-6mwj-ggp6-wmcx","CGA-6p2c-5fqw-h4mr","CGA-6p2x-w926-f698","CGA-6p7x-qx3c-28ww","CGA-6qrm-r2rx-24fm","CGA-6v4q-fjr3-hp5m","CGA-6ww5-x652-h5cf","CGA-6xp4-wccj-7h4j","CGA-73jq-qw63-f2cq","CGA-787j-2j3r-87xq","CGA-788r-ww8h-986h","CGA-78vc-w9hj-3hj7","CGA-797f-j8wv-mrv7","CGA-7cq3-29cx-ccf6","CGA-7mm7-5xw8-p6rh","CGA-7q87-h5wc-4jf9","CGA-7rf4-wjpr-3cjh","CGA-7v5x-g7qm-6g95","CGA-7v8f-g97h-r39c","CGA-7v9h-2722-99f5","CGA-7xr4-65mh-p2x2","CGA-83p3-397c-fq7p","CGA-876q-xpwh-9m35","CGA-89hw-qx35-gc9f","CGA-8g4p-p6x4-7mp3","CGA-8hqp-h748-4jwv","CGA-8hqq-8wqg-c27v","CGA-8jm2-q4pq-xfwg","CGA-8mc2-f82w-rfg4","CGA-8w34-mvr8-vwpr","CGA-93m4-5fxc-rxp9","CGA-9jq9-9hf8-88rg","CGA-9vrx-hw2m-w98x","CGA-9w47-7rr2-7qmw","CGA-c5cp-vp6f-597r","CGA-c753-w8jh-979w","CGA-c94h-3xfc-hf3p","CGA-ccvv-pcp4-4cfm","CGA-ccvx-h446-9g6m","CGA-ccwm-gpg9-5cfx","CGA-cf46-p3ch-jqcp","CGA-cg66-6976-f2cq","CGA-chqc-x5h2-w4x8","CGA-cq4r-83f8-mwhq","CGA-cxgw-fqc6-jwjc","CGA-f2jc-2gw2-mw9p","CGA-f6g8-q7jr-7r56","CGA-f6h9-w24h-gw6w","CGA-f6r8-45c8-c9pj","CGA-f7rj-9rqx-r972","CGA-fhjj-x4pg-4g8m","CGA-fjp9-7hfx-rh4f","CGA-fpqx-j4qf-jxg5","CGA-fvc9-3mf3-x2x8","CGA-g47q-26w3-x2fq","CGA-g89g-mmw7-j8qf","CGA-gf6p-j8pq-f5cv","CGA-gg95-r382-9rpw","CGA-gg97-3hmc-v6r6","CGA-ghhm-rwqv-cch9","CGA-gmc4-m73c-qwmr","CGA-gpww-5858-f3j5","CGA-gq6f-9855-6gjf","CGA-gqcq-ch8j-7cc8","CGA-gw7c-jfjm-5rmw","CGA-gxp5-9rqw-36gp","CGA-h3hp-cr92-c628","CGA-h54r-6gjv-cc7r","CGA-h7c9-v9jm-r9jh","CGA-hh74-gv6w-4c43","CGA-hp52-4qph-8mwm","CGA-j5gm-8942-hj4m","CGA-j7rc-9g4p-jmf5","CGA-j9f9-gh3f-j472","CGA-jf78-qm9v-f5pv","CGA-jg74-m9gh-8hqc","CGA-jjqc-qq36-7h29","CGA-jqmp-jwmx-jw5w","CGA-m28g-mmp3-w3w6","CGA-m38c-xpm8-7977","CGA-m428-fpq4-8wq3","CGA-m7pj-xcm7-7c97","CGA-mf4g-wx7p-33rc","CGA-mfww-29q7-4r27","CGA-mgw6-v5hw-hhq7","CGA-mh8p-69w7-x9p3","CGA-mm8v-2h93-gg25","CGA-mqhx-3m3m-5rg8","CGA-mrxf-v265-wm74","CGA-mvff-p885-64mq","CGA-mvxp-667w-hfhq","CGA-p43r-px6h-jxqx","CGA-p6rx-9vf7-f3hh","CGA-p7x7-w475-29m9","CGA-pf45-9jcj-2pvm","CGA-pffq-v6j5-qjvh","CGA-pfm7-54vp-pmw9","CGA-pfmf-xwwg-hrhq","CGA-pj76-jjf9-j3j5","CGA-pjvw-5j24-p73j","CGA-pm83-mpcv-j6wg","CGA-ppq9-pc32-c83w","CGA-pqfh-37gj-x5jc","CGA-pwf2-rjwf-p49v","CGA-pxw4-f8v9-v2xj","CGA-pxwg-grgp-8hcc","CGA-q2rf-6v4g-r5cw","CGA-q538-82f8-7f5f","CGA-q6qx-8rc2-fhrm","CGA-q8c2-hjqg-rxgf","CGA-q8mv-9492-pffv","CGA-q9mp-m79v-cx4r","CGA-qc5h-2489-r4v9","CGA-qj55-mfmx-gm3x","CGA-qx6c-5q2h-rvw4","CGA-r356-wg92-qr47","CGA-r7rh-5hpf-769r","CGA-r858-xpgr-99xv","CGA-rcmh-gwx7-vf4p","CGA-rcxg-7439-9hj6","CGA-rf56-28gj-4rwr","CGA-rh3f-wcg7-x6v7","CGA-rpg8-5r8p-238v","CGA-rv4f-h52x-wvw5","CGA-rv4g-3f3r-pxrx","CGA-rv5j-r28m-428m","CGA-rvmw-h3m4-4j3w","CGA-rwf8-446r-5c7p","CGA-v29w-9p86-r897","CGA-v2h9-2rvf-hmmq","CGA-v5g4-vqcv-fjr3","CGA-v5x2-m2mp-r9p8","CGA-v7qp-q594-gh45","CGA-v8g2-72r9-5w6g","CGA-v967-cvr7-fpp2","CGA-v98c-58qx-rjcf","CGA-vfr6-h6p7-5c43","CGA-vj6f-xhpv-2v9c","CGA-vjgq-6vfv-j335","CGA-vpxp-fpp6-v5fr","CGA-vvc4-gffc-hpc3","CGA-vvgp-ffj2-7hv2","CGA-w23h-mc5g-5455","CGA-w34v-76hc-vfrw","CGA-w9jr-fcv6-8693","CGA-wfcp-269g-4939","CGA-wm7j-6vhp-w968","CGA-wqjg-j8wx-gxjc","CGA-wvhm-3rrm-v8wm","CGA-x2vr-hm83-9rg2","CGA-x8r5-hvgq-wmw5","CGA-x96x-32h4-ppm4","CGA-xmc5-4frg-x9xj","CGA-xp5g-f2x5-c5xr","CGA-xpvq-2fxv-xpg6","CGA-xrx5-jc4j-54cf","CGA-xvwv-3x54-pw82"],"status":"published","duplicateOf":null,"title":null,"description":"Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that arbitrary code is later executed when that backup is restored. This can be used to provide that attacker with unintended/unauthorized access to the production deployment environment — allowing them to access information available in that environment as well as run any additional arbitrary commands there. Versions 23.0.3 and 22.0.4 contain a patch. Some workarounds are available. Those who intended to use an external decompressor then can always specify that decompressor command in the `--external-decompressor` flag value for `vttablet` and `vtbackup`. That then overrides any value specified in the manifest file. Those who did not intend to use an external decompressor, nor an internal one, can specify a value such as `cat` or `tee` in the `--external-decompressor` flag value for `vttablet` and `vtbackup` to ensure that a harmless command is always used.","dates":{"published":"2026-02-26T01:49:10.071Z","modified":"2026-02-26T19:32:59.874Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Go","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00704,"percentile":0.52514,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.28700000000000003,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00417},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00663,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00704,"percentile":0.52514}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00663,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00689,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00704,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00704,"percentile":0.52514}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"chainguard","product":"vitess-21","name":"vitess-21","label":"vitess-21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-21","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-21-binaries","name":"vitess-21-binaries","label":"vitess-21-binaries","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-21-binaries","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-22","name":"vitess-22","label":"vitess-22","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-22","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-22-binaries","name":"vitess-22-binaries","label":"vitess-22-binaries","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-22-binaries","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"vitess.io","product":"vitess","name":"vitess.io/vitess","label":"vitess","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/vitess.io/vitess","purlType":"golang","versions":[{"text":"≤ 0.23.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.23.0, < 0.23.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 0.23.2 | ≥ 0.23.0, < 0.23.3","eol":null,"hubHref":null},{"vendor":"linuxfoundation","product":"vitess","name":"vitess","label":"vitess","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.0.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 23.0.0, < 23.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.0.4 | ≥ 23.0.0, < 23.0.3","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"vitess","label":"Vitess","category":"database"}},"hubHref":"/vendor/linuxfoundation/vitess"},{"vendor":"vitessio","product":"vitess","name":"vitess","label":"vitess","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.0.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 23.0.0, < 23.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.0.4 | ≥ 23.0.0, < 23.0.3","eol":null,"hubHref":"/vendor/vitessio/vitess"}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/vitessio/vitess/security/advisories/GHSA-8g8j-r87h-p36x","label":"github.com/vitessio/vitess/security/advisories/GHSA-8g8j-r87h-p36x","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","Advisory","Mitigation","Patch","Vendor Advisory"]},{"url":"https://github.com/vitessio/vitess/issues/19459","label":"github.com/vitessio/vitess/issues/19459","hostname":"github.com","tags":["X Refsource MISC","WEB","REPORT","Issue Tracking"]},{"url":"https://github.com/vitessio/vitess/pull/19460","label":"github.com/vitessio/vitess/pull/19460","hostname":"github.com","tags":["X Refsource MISC","WEB","FIX","Issue Tracking","Patch"]},{"url":"https://github.com/vitessio/vitess/commit/4c0173293907af9cb942a6683c465c3f1e9fdb5c","label":"github.com/vitessio/vitess/commit/4c0173293907af9cb942a6683c465c3f1e9fdb5c","hostname":"github.com","tags":["X Refsource MISC","WEB","FIX","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27965","label":"nvd.nist.gov/vuln/detail/CVE-2026-27965","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/vitessio/vitess","label":"github.com/vitessio/vitess","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27965.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27965.json","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21483-1","SUSE-SU-2026:1042-1"],"duplicates":[],"related":["OPENSUSE-SU-2026:21483-1","SUSE-SU-2026:1042-1"]},"timeline":[{"kind":"published","date":"2026-02-26T01:49:10.071Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-26T19:32:59.874Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:20:10.197Z","stale":false,"partial":false}}