OPENSUSE-SU-2026:12076-1

Vulnerability from csaf_opensuse - Published: 2026-10-07 00:00 - Updated: 2026-10-08 18:02
Summary
traefik-3.7.13-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: traefik-3.7.13-1.1 on GA media
Description of the patch: These are all security issues fixed in the traefik-3.7.13-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12076
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-88004
7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-88007
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 4 products, the same list as for CVE-2026-88004
Threats
Impact critical
CVE-2026-88008
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 4 products, the same list as for CVE-2026-88004
Threats
Impact critical
CVE-2026-88009
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
Recommended 4 products, the same list as for CVE-2026-88004
Threats
Impact important
CVE-2026-88010
Affected products
Recommended 4 products, the same list as for CVE-2026-88004
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "traefik-3.7.13-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the traefik-3.7.13-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-12076",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12076-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-88004 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-88004/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-88007 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-88007/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-88008 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-88008/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-88009 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-88009/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-88010 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-88010/"
      }
    ],
    "title": "traefik-3.7.13-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-10-08T18:02:32Z",
      "generator": {
        "date": "2026-10-07T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:12076-1",
      "initial_release_date": "2026-10-07T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-10-07T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-08T18:02:32Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "traefik-0:3.7.13-1.1.aarch64",
                "product": {
                  "name": "traefik-0:3.7.13-1.1.aarch64",
                  "product_id": "traefik-0:3.7.13-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:traefik:traefik:3.7.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/traefik@3.7.13-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "traefik-0:3.7.13-1.1.ppc64le",
                "product": {
                  "name": "traefik-0:3.7.13-1.1.ppc64le",
                  "product_id": "traefik-0:3.7.13-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:traefik:traefik:3.7.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/traefik@3.7.13-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "traefik-0:3.7.13-1.1.s390x",
                "product": {
                  "name": "traefik-0:3.7.13-1.1.s390x",
                  "product_id": "traefik-0:3.7.13-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:traefik:traefik:3.7.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/traefik@3.7.13-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "traefik-0:3.7.13-1.1.x86_64",
                "product": {
                  "name": "traefik-0:3.7.13-1.1.x86_64",
                  "product_id": "traefik-0:3.7.13-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:traefik:traefik:3.7.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/traefik@3.7.13-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "traefik-0:3.7.13-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64"
        },
        "product_reference": "traefik-0:3.7.13-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "traefik-0:3.7.13-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le"
        },
        "product_reference": "traefik-0:3.7.13-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "traefik-0:3.7.13-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x"
        },
        "product_reference": "traefik-0:3.7.13-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "traefik-0:3.7.13-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
        },
        "product_reference": "traefik-0:3.7.13-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-88004",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-88004"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted header name in an HTTP/1.1 chunked trailer or an HTTP/2 trailer. When the retry or buffering middleware reads the body before the reverse proxy clones the request, the attacker-controlled trailer value reaches a backend that merges trailers into the header namespace, bypassing the documented delete or reject behavior and potentially spoofing identity or forwarded routing data. This issue is fixed in 3.7.13.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-88004",
          "url": "https://www.suse.com/security/cve/CVE-2026-88004"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-88004"
    },
    {
      "cve": "CVE-2026-88007",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-88007"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, so kerberosRoundTripper uses a shared backend transport instead of a transport dedicated to each frontend connection. With HTTP/3 enabled, a backend using connection-bound NTLM or Negotiate authentication, and backend keep-alive, an unrelated client can reuse a backend connection authenticated for a victim, read victim-only data, and act as that victim without the victim credentials. This issue is fixed in 2.11.57 and 3.7.13.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-88007",
          "url": "https://www.suse.com/security/cve/CVE-2026-88007"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-07T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-88007"
    },
    {
      "cve": "CVE-2026-88008",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-88008"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the Upgrade: h2c token, and HTTP2-Settings to a shared backend. If the backend accepts h2c and returns 101 Switching Protocols, Traefik enters a raw tunnel and no longer applies routers, BasicAuth, ForwardAuth, IPAllowList, RateLimit, access logging, metrics, or tracing to later HTTP/2 requests, allowing an unauthenticated request through an unprotected route to reach protected paths on the same backend. This issue is fixed in 2.11.57 and 3.7.13.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-88008",
          "url": "https://www.suse.com/security/cve/CVE-2026-88008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-07T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-88008"
    },
    {
      "cve": "CVE-2026-88009",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-88009"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evaluates routing, path sanitization, forwardAuth, encodedCharacters, and access logging against a path normalized to / but forwards URL.Opaque verbatim to the backend, allowing cross-vhost routing bypass, path-scoped authorization bypass, and access-log evasion when the backend interprets the opaque target as a path. This issue is fixed in 2.11.57 and 3.7.13.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-88009",
          "url": "https://www.suse.com/security/cve/CVE-2026-88009"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-88009"
    },
    {
      "cve": "CVE-2026-88010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-88010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basic_auth.go constructs the BasicAuth singleflight key from the submitted password and stored secret. Concurrent requests for absent usernames therefore coalesce on one key while configured usernames perform separate password hashes, creating an unauthenticated timing discrepancy that reveals whether a username exists. Sequential checks remain cost-equalized, Traefik v2 and Digest authentication are not affected, and the issue does not disclose credentials or bypass authentication. This issue is fixed in version 3.7.13.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
          "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-88010",
          "url": "https://www.suse.com/security/cve/CVE-2026-88010"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.aarch64",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.ppc64le",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.s390x",
            "openSUSE Tumbleweed:traefik-0:3.7.13-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-88010"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.