{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-100719", "tracking": { "current_release_date": "2026-09-30T18:37:56.662417Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-100719", "initial_release_date": "2026-09-26T14:30:24.940206Z", "revision_history": [ { "date": "2026-09-26T14:30:24.940206Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-09-26T14:30:27.544599Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-09-26T15:35:59.720554Z", "number": "3", "summary": "NCSC Score updated." }, { "date": "2026-09-27T06:20:00.264291Z", "number": "4", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (143).| References created (4).| CWES updated (1)." }, { "date": "2026-09-27T06:20:16.925974Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-09-27T15:15:12.527228Z", "number": "6", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-27T15:16:24.292750Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-09-28T09:39:45.716468Z", "number": "8", "summary": "Source connected.| CVE status created. (valid)| Products connected (1).| References created (16)." }, { "date": "2026-09-28T09:39:51.697709Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-09-28T12:42:29.764462Z", "number": "10", "summary": "CVSS created.| CWES created (1).| Unknown change.| Products created (3).| References created (2).| Description created for source.| Unknown change.| Product Identifiers created (1)." }, { "date": "2026-09-28T12:42:34.289099Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-09-29T16:13:25.257977Z", "number": "12", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-29T16:13:29.863481Z", "number": "13", "summary": "NCSC Score updated." } ], "status": "interim", "version": "13" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/2.3.12", "product": { "name": "vers:semver/2.3.12", "product_id": "CSAFPID-9478933" } }, { "category": "product_version_range", "name": "vers:semver/<2.3.12", "product": { "name": "vers:semver/<2.3.12", "product_id": "CSAFPID-9294183" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0", "product": { "name": "vers:unknown/0.10.0", "product_id": "CSAFPID-533796" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0-rc1", "product": { "name": "vers:unknown/0.10.0-rc1", "product_id": "CSAFPID-3452625" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0-rc2", "product": { "name": "vers:unknown/0.10.0-rc2", "product_id": "CSAFPID-3452626" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.1", "product": { "name": "vers:unknown/0.10.1", "product_id": "CSAFPID-533797" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.10", "product": { "name": "vers:unknown/0.10.10", "product_id": "CSAFPID-533786" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.11", "product": { "name": "vers:unknown/0.10.11", "product_id": "CSAFPID-533794" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.12", "product": { "name": "vers:unknown/0.10.12", "product_id": "CSAFPID-533789" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.13", "product": { "name": "vers:unknown/0.10.13", "product_id": "CSAFPID-533787" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.14", "product": { "name": "vers:unknown/0.10.14", "product_id": "CSAFPID-533801" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.15", "product": { "name": "vers:unknown/0.10.15", "product_id": "CSAFPID-533800" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.16", "product": { "name": "vers:unknown/0.10.16", "product_id": "CSAFPID-584149" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.17", "product": { "name": "vers:unknown/0.10.17", "product_id": "CSAFPID-586043" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.18", "product": { "name": "vers:unknown/0.10.18", "product_id": "CSAFPID-586041" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.19", "product": { "name": "vers:unknown/0.10.19", "product_id": "CSAFPID-586039" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.2", "product": { "name": "vers:unknown/0.10.2", "product_id": "CSAFPID-533785" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.20", "product": { "name": "vers:unknown/0.10.20", "product_id": "CSAFPID-586038" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.21", "product": { "name": "vers:unknown/0.10.21", "product_id": "CSAFPID-586040" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.22", "product": { "name": "vers:unknown/0.10.22", "product_id": "CSAFPID-586042" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.23", "product": { "name": "vers:unknown/0.10.23", "product_id": "CSAFPID-810715" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.23.1", "product": { "name": "vers:unknown/0.10.23.1", "product_id": "CSAFPID-810709" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.24", "product": { "name": "vers:unknown/0.10.24", "product_id": "CSAFPID-810704" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.25", "product": { "name": "vers:unknown/0.10.25", "product_id": "CSAFPID-810719" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.26", "product": { "name": "vers:unknown/0.10.26", "product_id": "CSAFPID-810711" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.27", "product": { "name": "vers:unknown/0.10.27", "product_id": "CSAFPID-810712" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.28", "product": { "name": "vers:unknown/0.10.28", "product_id": "CSAFPID-810714" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.29", "product": { "name": "vers:unknown/0.10.29", "product_id": "CSAFPID-810705" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.29.1", "product": { "name": "vers:unknown/0.10.29.1", "product_id": "CSAFPID-810707" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.3", "product": { "name": "vers:unknown/0.10.3", "product_id": "CSAFPID-533791" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.30", "product": { "name": "vers:unknown/0.10.30", "product_id": "CSAFPID-810717" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.31", "product": { "name": "vers:unknown/0.10.31", "product_id": "CSAFPID-810708" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.32", "product": { "name": "vers:unknown/0.10.32", "product_id": "CSAFPID-810716" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.33", "product": { "name": "vers:unknown/0.10.33", "product_id": "CSAFPID-810713" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.4", "product": { "name": "vers:unknown/0.10.4", "product_id": "CSAFPID-533790" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.5", "product": { "name": "vers:unknown/0.10.5", "product_id": "CSAFPID-533788" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.6", "product": { "name": "vers:unknown/0.10.6", "product_id": "CSAFPID-533795" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.7", "product": { "name": "vers:unknown/0.10.7", "product_id": "CSAFPID-533784" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.8", "product": { "name": "vers:unknown/0.10.8", "product_id": "CSAFPID-533792" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.9", "product": { "name": "vers:unknown/0.10.9", "product_id": "CSAFPID-533799" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.18", "product": { "name": "vers:unknown/0.9.18", "product_id": "CSAFPID-260507" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.18.1", "product": { "name": "vers:unknown/0.9.18.1", "product_id": "CSAFPID-260471" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.19", "product": { "name": "vers:unknown/0.9.19", "product_id": "CSAFPID-260472" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.20", "product": { "name": "vers:unknown/0.9.20", "product_id": "CSAFPID-260513" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.20.1", "product": { "name": "vers:unknown/0.9.20.1", "product_id": "CSAFPID-260510" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.21", "product": { "name": "vers:unknown/0.9.21", "product_id": "CSAFPID-260505" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.22", "product": { "name": "vers:unknown/0.9.22", "product_id": "CSAFPID-260477" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.22-rc1", "product": { "name": "vers:unknown/0.9.22-rc1", "product_id": "CSAFPID-3452627" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.23", "product": { "name": "vers:unknown/0.9.23", "product_id": "CSAFPID-260484" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.23-rc1", "product": { "name": "vers:unknown/0.9.23-rc1", "product_id": "CSAFPID-3452628" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.24", "product": { "name": "vers:unknown/0.9.24", "product_id": "CSAFPID-260476" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.24-rc1", "product": { "name": "vers:unknown/0.9.24-rc1", "product_id": "CSAFPID-3452629" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.25", "product": { "name": "vers:unknown/0.9.25", "product_id": "CSAFPID-260501" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.25-rc1", "product": { "name": "vers:unknown/0.9.25-rc1", "product_id": "CSAFPID-3452630" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.26", "product": { "name": "vers:unknown/0.9.26", "product_id": "CSAFPID-260495" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.26-rc1", "product": { "name": "vers:unknown/0.9.26-rc1", "product_id": "CSAFPID-3452631" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.27", "product": { "name": "vers:unknown/0.9.27", "product_id": "CSAFPID-260474" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.27-rc1", "product": { "name": "vers:unknown/0.9.27-rc1", "product_id": "CSAFPID-3452632" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.28", "product": { "name": "vers:unknown/0.9.28", "product_id": "CSAFPID-260504" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.28-rc1", "product": { "name": "vers:unknown/0.9.28-rc1", "product_id": "CSAFPID-3452633" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.28.1", "product": { "name": "vers:unknown/0.9.28.1", "product_id": "CSAFPID-260493" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.29", "product": { "name": "vers:unknown/0.9.29", "product_id": "CSAFPID-260498" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.29-rc1", "product": { "name": "vers:unknown/0.9.29-rc1", "product_id": "CSAFPID-3452634" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.30", "product": { "name": "vers:unknown/0.9.30", "product_id": "CSAFPID-260490" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.30-rc1", "product": { "name": "vers:unknown/0.9.30-rc1", "product_id": "CSAFPID-3452635" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.31-rc1", "product": { "name": "vers:unknown/0.9.31-rc1", "product_id": "CSAFPID-3452636" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.32", "product": { "name": "vers:unknown/0.9.32", "product_id": "CSAFPID-260494" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.32-rc1", "product": { "name": "vers:unknown/0.9.32-rc1", "product_id": "CSAFPID-3452638" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.32-rc2", "product": { "name": "vers:unknown/0.9.32-rc2", "product_id": "CSAFPID-3452639" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.33-rc1", "product": { "name": "vers:unknown/0.9.33-rc1", "product_id": "CSAFPID-3452640" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.33-rc2", "product": { "name": "vers:unknown/0.9.33-rc2", "product_id": "CSAFPID-3452641" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.33-rc3", "product": { "name": "vers:unknown/0.9.33-rc3", "product_id": "CSAFPID-3452642" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.34.1", "product": { "name": "vers:unknown/0.9.34.1", "product_id": "CSAFPID-301104" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.34.2", "product": { "name": "vers:unknown/0.9.34.2", "product_id": "CSAFPID-301106" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.35", "product": { "name": "vers:unknown/0.9.35", "product_id": "CSAFPID-384992" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.35-rc1", "product": { "name": "vers:unknown/0.9.35-rc1", "product_id": "CSAFPID-3452643" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.35.1", "product": { "name": "vers:unknown/0.9.35.1", "product_id": "CSAFPID-385008" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.36", "product": { "name": "vers:unknown/0.9.36", "product_id": "CSAFPID-384997" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.37", "product": { "name": "vers:unknown/0.9.37", "product_id": "CSAFPID-384994" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.37-rc1", "product": { "name": "vers:unknown/0.9.37-rc1", "product_id": "CSAFPID-3452644" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38", "product": { "name": "vers:unknown/0.9.38", "product_id": "CSAFPID-385003" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38-rc1", "product": { "name": "vers:unknown/0.9.38-rc1", "product_id": "CSAFPID-3452645" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38-rc2", "product": { "name": "vers:unknown/0.9.38-rc2", "product_id": "CSAFPID-3452646" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.1", "product": { "name": "vers:unknown/0.9.38.1", "product_id": "CSAFPID-385006" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.2", "product": { "name": "vers:unknown/0.9.38.2", "product_id": "CSAFPID-384991" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.3", "product": { "name": "vers:unknown/0.9.38.3", "product_id": "CSAFPID-384998" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.4", "product": { "name": "vers:unknown/0.9.38.4", "product_id": "CSAFPID-385002" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.5", "product": { "name": "vers:unknown/0.9.38.5", "product_id": "CSAFPID-385004" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.6", "product": { "name": "vers:unknown/0.9.38.6", "product_id": "CSAFPID-385009" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.7", "product": { "name": "vers:unknown/0.9.38.7", "product_id": "CSAFPID-384996" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.38.8", "product": { "name": "vers:unknown/0.9.38.8", "product_id": "CSAFPID-384999" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.39", "product": { "name": "vers:unknown/0.9.39", "product_id": "CSAFPID-385007" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.39.1", "product": { "name": "vers:unknown/0.9.39.1", "product_id": "CSAFPID-384995" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.39.2", "product": { "name": "vers:unknown/0.9.39.2", "product_id": "CSAFPID-385000" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.39.3", "product": { "name": "vers:unknown/0.9.39.3", "product_id": "CSAFPID-385001" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.39.4", "product": { "name": "vers:unknown/0.9.39.4", "product_id": "CSAFPID-385005" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.39.5", "product": { "name": "vers:unknown/0.9.39.5", "product_id": "CSAFPID-384993" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.1", "product": { "name": "vers:unknown/2.0.1", "product_id": "CSAFPID-876015" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.10", "product": { "name": "vers:unknown/2.0.10", "product_id": "CSAFPID-879533" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.11", "product": { "name": "vers:unknown/2.0.11", "product_id": "CSAFPID-882822" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.12", "product": { "name": "vers:unknown/2.0.12", "product_id": "CSAFPID-882823" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.13", "product": { "name": "vers:unknown/2.0.13", "product_id": "CSAFPID-897815" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.14", "product": { "name": "vers:unknown/2.0.14", "product_id": "CSAFPID-945280" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.15", "product": { "name": "vers:unknown/2.0.15", "product_id": "CSAFPID-945281" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.16", "product": { "name": "vers:unknown/2.0.16", "product_id": "CSAFPID-945282" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.17", "product": { "name": "vers:unknown/2.0.17", "product_id": "CSAFPID-945283" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.18", "product": { "name": "vers:unknown/2.0.18", "product_id": "CSAFPID-945284" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.19", "product": { "name": "vers:unknown/2.0.19", "product_id": "CSAFPID-945285" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.2", "product": { "name": "vers:unknown/2.0.2", "product_id": "CSAFPID-876013" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.20", "product": { "name": "vers:unknown/2.0.20", "product_id": "CSAFPID-945396" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.21", "product": { "name": "vers:unknown/2.0.21", "product_id": "CSAFPID-945397" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.22", "product": { "name": "vers:unknown/2.0.22", "product_id": "CSAFPID-3765852" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.23", "product": { "name": "vers:unknown/2.0.23", "product_id": "CSAFPID-3765853" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.24", "product": { "name": "vers:unknown/2.0.24", "product_id": "CSAFPID-3765854" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.3", "product": { "name": "vers:unknown/2.0.3", "product_id": "CSAFPID-876017" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.4", "product": { "name": "vers:unknown/2.0.4", "product_id": "CSAFPID-876018" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.5", "product": { "name": "vers:unknown/2.0.5", "product_id": "CSAFPID-876019" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.6", "product": { "name": "vers:unknown/2.0.6", "product_id": "CSAFPID-876016" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.7", "product": { "name": "vers:unknown/2.0.7", "product_id": "CSAFPID-876014" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.8", "product": { "name": "vers:unknown/2.0.8", "product_id": "CSAFPID-877915" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.9", "product": { "name": "vers:unknown/2.0.9", "product_id": "CSAFPID-877916" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0", "product": { "name": "vers:unknown/2.1.0", "product_id": "CSAFPID-1015399" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0-beta1", "product": { "name": "vers:unknown/2.1.0-beta1", "product_id": "CSAFPID-3765855" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0-beta2", "product": { "name": "vers:unknown/2.1.0-beta2", "product_id": "CSAFPID-3765856" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0-rc1", "product": { "name": "vers:unknown/2.1.0-rc1", "product_id": "CSAFPID-3765857" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0-rc2", "product": { "name": "vers:unknown/2.1.0-rc2", "product_id": "CSAFPID-3765858" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0-rc3", "product": { "name": "vers:unknown/2.1.0-rc3", "product_id": "CSAFPID-3765859" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.1", "product": { "name": "vers:unknown/2.1.1", "product_id": "CSAFPID-1015398" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.2", "product": { "name": "vers:unknown/2.1.2", "product_id": "CSAFPID-1095067" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.3", "product": { "name": "vers:unknown/2.1.3", "product_id": "CSAFPID-1095068" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.4", "product": { "name": "vers:unknown/2.1.4", "product_id": "CSAFPID-1095069" } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0-rc1", "product": { "name": "vers:unknown/2.2.0-rc1", "product_id": "CSAFPID-3765860" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0", "product": { "name": "vers:unknown/2.3.0", "product_id": "CSAFPID-5574735" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0-rc1", "product": { "name": "vers:unknown/2.3.0-rc1", "product_id": "CSAFPID-5574736" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.1", "product": { "name": "vers:unknown/2.3.1", "product_id": "CSAFPID-5574737" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.10", "product": { "name": "vers:unknown/2.3.10", "product_id": "CSAFPID-9294122" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.11", "product": { "name": "vers:unknown/2.3.11", "product_id": "CSAFPID-9294123" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.2", "product": { "name": "vers:unknown/2.3.2", "product_id": "CSAFPID-5574738" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.3", "product": { "name": "vers:unknown/2.3.3", "product_id": "CSAFPID-5574739" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.4", "product": { "name": "vers:unknown/2.3.4", "product_id": "CSAFPID-5670783" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.5", "product": { "name": "vers:unknown/2.3.5", "product_id": "CSAFPID-6227459" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.6", "product": { "name": "vers:unknown/2.3.6", "product_id": "CSAFPID-7944759" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.7", "product": { "name": "vers:unknown/2.3.7", "product_id": "CSAFPID-9009107" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.8", "product": { "name": "vers:unknown/2.3.8", "product_id": "CSAFPID-9294120" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.9", "product": { "name": "vers:unknown/2.3.9", "product_id": "CSAFPID-9294121" } }, { "category": "product_version_range", "name": "vers:unknown/<=2.3.12", "product": { "name": "vers:unknown/<=2.3.12", "product_id": "CSAFPID-9460313", "product_identification_helper": { "cpe": "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Froxlor" } ], "category": "vendor", "name": "Froxlor" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<2.3.13", "product": { "name": "vers:unknown/<2.3.13", "product_id": "CSAFPID-9305068" } } ], "category": "product_name", "name": "Froxlor" } ], "category": "vendor", "name": "Open Source" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-100719", "notes": [ { "category": "description", "text": "Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure of reused credentials.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-100719" }, { "category": "description", "text": "Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure of reused credentials.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-100719" }, { "category": "description", "text": "Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure of reused credentials.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-100719.json?alt=media" }, { "category": "other", "text": "0.00236", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "7.1", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.8", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "There is cwe data available from source Nvd, Is related to (a version of) an uncommon product, The value of the most recent CVSS (V3) score", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-260471", "CSAFPID-260472", "CSAFPID-260474", "CSAFPID-260476", "CSAFPID-260477", "CSAFPID-260484", "CSAFPID-260490", "CSAFPID-260493", "CSAFPID-260494", "CSAFPID-260495", "CSAFPID-260498", "CSAFPID-260501", "CSAFPID-260504", "CSAFPID-260505", "CSAFPID-260507", "CSAFPID-260510", "CSAFPID-260513", "CSAFPID-301104", "CSAFPID-301106", "CSAFPID-384991", "CSAFPID-384992", "CSAFPID-384993", "CSAFPID-384994", "CSAFPID-384995", "CSAFPID-384996", "CSAFPID-384997", "CSAFPID-384998", "CSAFPID-384999", "CSAFPID-385000", "CSAFPID-385001", "CSAFPID-385002", "CSAFPID-385003", "CSAFPID-385004", "CSAFPID-385005", "CSAFPID-385006", "CSAFPID-385007", "CSAFPID-385008", "CSAFPID-385009", "CSAFPID-533784", "CSAFPID-533785", "CSAFPID-533786", "CSAFPID-533787", "CSAFPID-533788", "CSAFPID-533789", "CSAFPID-533790", "CSAFPID-533791", "CSAFPID-533792", "CSAFPID-533794", "CSAFPID-533795", "CSAFPID-533796", "CSAFPID-533797", "CSAFPID-533799", "CSAFPID-533800", "CSAFPID-533801", "CSAFPID-584149", "CSAFPID-586038", "CSAFPID-586039", "CSAFPID-586040", "CSAFPID-586041", "CSAFPID-586042", "CSAFPID-586043", "CSAFPID-810704", "CSAFPID-810705", "CSAFPID-810707", "CSAFPID-810708", "CSAFPID-810709", "CSAFPID-810711", "CSAFPID-810712", "CSAFPID-810713", "CSAFPID-810714", "CSAFPID-810715", "CSAFPID-810716", "CSAFPID-810717", "CSAFPID-810719", "CSAFPID-876013", "CSAFPID-876014", "CSAFPID-876015", "CSAFPID-876016", "CSAFPID-876017", "CSAFPID-876018", "CSAFPID-876019", "CSAFPID-877915", "CSAFPID-877916", "CSAFPID-879533", "CSAFPID-882822", "CSAFPID-882823", "CSAFPID-897815", "CSAFPID-945280", "CSAFPID-945281", "CSAFPID-945282", "CSAFPID-945283", "CSAFPID-945284", "CSAFPID-945285", "CSAFPID-945396", "CSAFPID-945397", "CSAFPID-1015398", "CSAFPID-1015399", "CSAFPID-1095067", "CSAFPID-1095068", "CSAFPID-1095069", "CSAFPID-3452625", "CSAFPID-3452626", "CSAFPID-3452627", "CSAFPID-3452628", "CSAFPID-3452629", "CSAFPID-3452630", "CSAFPID-3452631", "CSAFPID-3452632", "CSAFPID-3452633", "CSAFPID-3452634", "CSAFPID-3452635", "CSAFPID-3452636", "CSAFPID-3452638", "CSAFPID-3452639", "CSAFPID-3452640", "CSAFPID-3452641", "CSAFPID-3452642", "CSAFPID-3452643", "CSAFPID-3452644", "CSAFPID-3452645", "CSAFPID-3452646", "CSAFPID-3765852", "CSAFPID-3765853", "CSAFPID-3765854", "CSAFPID-3765855", "CSAFPID-3765856", "CSAFPID-3765857", "CSAFPID-3765858", "CSAFPID-3765859", "CSAFPID-3765860", "CSAFPID-5574735", "CSAFPID-5574736", "CSAFPID-5574737", "CSAFPID-5574738", "CSAFPID-5574739", "CSAFPID-5670783", "CSAFPID-6227459", "CSAFPID-7944759", "CSAFPID-9009107", "CSAFPID-9294120", "CSAFPID-9294121", "CSAFPID-9294122", "CSAFPID-9294123", "CSAFPID-9305068", "CSAFPID-9294183", "CSAFPID-9460313" ], "known_not_affected": [ "CSAFPID-9478933" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-100719.json?alt=media" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-100719" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100719" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3200.json" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100719" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-2wjc-6mgx-hq42" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-3w4g-cmpj-rj42" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-57wv-g7m3-hmff" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-6q2v-jjq5-m2c8" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-79gx-h528-j9xf" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-89vj-gqqr-73p8" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; nvd; osv", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-8wfc-9qp5-gjxf" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-927x-9jfh-mq42" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-9fq7-9w8p-c3qh" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-gxx3-hwjc-h2gp" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-m9j6-9856-68xf" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-p3v3-74gc-jh5f" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-px4q-2rf7-cvcf" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/froxlor/froxlor/security/advisories/GHSA-w582-7wqv-62mm" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3200.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3200" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://www.vulncheck.com/advisories/froxlor-before-2.3.12-credential-disclosure-via-dirprotections-api" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-100719.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100719" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1015398", "CSAFPID-1015399", "CSAFPID-1095067", "CSAFPID-1095068", "CSAFPID-1095069", "CSAFPID-260471", "CSAFPID-260472", "CSAFPID-260474", "CSAFPID-260476", "CSAFPID-260477", "CSAFPID-260484", "CSAFPID-260490", "CSAFPID-260493", "CSAFPID-260494", "CSAFPID-260495", "CSAFPID-260498", "CSAFPID-260501", "CSAFPID-260504", "CSAFPID-260505", "CSAFPID-260507", "CSAFPID-260510", "CSAFPID-260513", "CSAFPID-301104", "CSAFPID-301106", "CSAFPID-3452625", "CSAFPID-3452626", "CSAFPID-3452627", "CSAFPID-3452628", "CSAFPID-3452629", "CSAFPID-3452630", "CSAFPID-3452631", "CSAFPID-3452632", "CSAFPID-3452633", "CSAFPID-3452634", "CSAFPID-3452635", "CSAFPID-3452636", "CSAFPID-3452638", "CSAFPID-3452639", "CSAFPID-3452640", "CSAFPID-3452641", "CSAFPID-3452642", "CSAFPID-3452643", "CSAFPID-3452644", "CSAFPID-3452645", "CSAFPID-3452646", "CSAFPID-3765852", "CSAFPID-3765853", "CSAFPID-3765854", "CSAFPID-3765855", "CSAFPID-3765856", "CSAFPID-3765857", "CSAFPID-3765858", "CSAFPID-3765859", "CSAFPID-3765860", "CSAFPID-384991", "CSAFPID-384992", "CSAFPID-384993", "CSAFPID-384994", "CSAFPID-384995", "CSAFPID-384996", "CSAFPID-384997", "CSAFPID-384998", "CSAFPID-384999", "CSAFPID-385000", "CSAFPID-385001", "CSAFPID-385002", "CSAFPID-385003", "CSAFPID-385004", "CSAFPID-385005", "CSAFPID-385006", "CSAFPID-385007", "CSAFPID-385008", "CSAFPID-385009", "CSAFPID-533784", "CSAFPID-533785", "CSAFPID-533786", "CSAFPID-533787", "CSAFPID-533788", "CSAFPID-533789", "CSAFPID-533790", "CSAFPID-533791", "CSAFPID-533792", "CSAFPID-533794", "CSAFPID-533795", "CSAFPID-533796", "CSAFPID-533797", "CSAFPID-533799", "CSAFPID-533800", "CSAFPID-533801", "CSAFPID-5574735", "CSAFPID-5574736", "CSAFPID-5574737", "CSAFPID-5574738", "CSAFPID-5574739", "CSAFPID-5670783", "CSAFPID-584149", "CSAFPID-586038", "CSAFPID-586039", "CSAFPID-586040", "CSAFPID-586041", "CSAFPID-586042", "CSAFPID-586043", "CSAFPID-6227459", "CSAFPID-7944759", "CSAFPID-810704", "CSAFPID-810705", "CSAFPID-810707", "CSAFPID-810708", "CSAFPID-810709", "CSAFPID-810711", "CSAFPID-810712", "CSAFPID-810713", "CSAFPID-810714", "CSAFPID-810715", "CSAFPID-810716", "CSAFPID-810717", "CSAFPID-810719", "CSAFPID-876013", "CSAFPID-876014", "CSAFPID-876015", "CSAFPID-876016", "CSAFPID-876017", "CSAFPID-876018", "CSAFPID-876019", "CSAFPID-877915", "CSAFPID-877916", "CSAFPID-879533", "CSAFPID-882822", "CSAFPID-882823", "CSAFPID-897815", "CSAFPID-9009107", "CSAFPID-9294120", "CSAFPID-9294121", "CSAFPID-9294122", "CSAFPID-9294123", "CSAFPID-9294183", "CSAFPID-9305068", "CSAFPID-945280", "CSAFPID-945281", "CSAFPID-945282", "CSAFPID-945283", "CSAFPID-945284", "CSAFPID-945285", "CSAFPID-945396", "CSAFPID-945397", "CSAFPID-9460313" ] } ], "title": "CVE-2026-100719" } ] }