{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27640", "tracking": { "current_release_date": "2026-03-23T02:59:24.247675Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27640", "initial_release_date": "2026-02-25T04:24:53.585433Z", "revision_history": [ { "date": "2026-02-25T04:24:53.585433Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-02-25T04:25:03.295761Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-25T04:38:42.808753Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-02-25T04:38:45.224295Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-25T07:35:27.043154Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-02-25T15:13:44.437616Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-25T15:13:46.516219Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-02-25T21:38:49.303019Z", "number": "8", "summary": "Unknown change." }, { "date": "2026-02-26T00:14:42.710676Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (155).| References created (4).| CWES updated (1)." }, { "date": "2026-02-26T00:15:04.799426Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-02-27T19:25:41.242676Z", "number": "11", "summary": "CVSS created.| Products created (1).| Product Identifiers created (1)." }, { "date": "2026-02-27T19:25:43.461365Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-03-04T16:24:52.902584Z", "number": "13", "summary": "Products connected (1).| Product Identifiers created (1).| Products removed (1)." }, { "date": "2026-03-20T09:40:22.316137Z", "number": "14", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:40:25.053067Z", "number": "15", "summary": "NCSC Score updated." } ], "status": "interim", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.26.1", "product": { "name": "vers:unknown/<1.26.1", "product_id": "CSAFPID-5700892", "product_identification_helper": { "cpe": "cpe:2.3:a:oocx:tfplan2md:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0", "product": { "name": "vers:unknown/v0.1.0", "product_id": "CSAFPID-5713593" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.1", "product": { "name": "vers:unknown/v0.1.1", "product_id": "CSAFPID-5713594" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.2", "product": { "name": "vers:unknown/v0.1.2", "product_id": "CSAFPID-5713595" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.3", "product": { "name": "vers:unknown/v0.1.3", "product_id": "CSAFPID-5713596" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-5713597" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0", "product": { "name": "vers:unknown/v0.11.0", "product_id": "CSAFPID-5713598" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0", "product": { "name": "vers:unknown/v0.12.0", "product_id": "CSAFPID-5713599" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0", "product": { "name": "vers:unknown/v0.13.0", "product_id": "CSAFPID-5713600" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.1", "product": { "name": "vers:unknown/v0.13.1", "product_id": "CSAFPID-5713601" } }, { "category": "product_version_range", "name": "vers:unknown/v0.14.0", "product": { "name": "vers:unknown/v0.14.0", "product_id": "CSAFPID-5713602" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0", "product": { "name": "vers:unknown/v0.15.0", "product_id": "CSAFPID-5713603" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.1", "product": { "name": "vers:unknown/v0.15.1", "product_id": "CSAFPID-5713604" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0", "product": { "name": "vers:unknown/v0.16.0", "product_id": "CSAFPID-5713605" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.1", "product": { "name": "vers:unknown/v0.16.1", "product_id": "CSAFPID-5713606" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.2", "product": { "name": "vers:unknown/v0.16.2", "product_id": "CSAFPID-5713607" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.3", "product": { "name": "vers:unknown/v0.16.3", "product_id": "CSAFPID-5713608" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.4", "product": { "name": "vers:unknown/v0.16.4", "product_id": "CSAFPID-5713609" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.5", "product": { "name": "vers:unknown/v0.16.5", "product_id": "CSAFPID-5713610" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0", "product": { "name": "vers:unknown/v0.17.0", "product_id": "CSAFPID-5713611" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.0", "product": { "name": "vers:unknown/v0.18.0", "product_id": "CSAFPID-5713612" } }, { "category": "product_version_range", "name": "vers:unknown/v0.19.0", "product": { "name": "vers:unknown/v0.19.0", "product_id": "CSAFPID-5713613" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0", "product": { "name": "vers:unknown/v0.2.0", "product_id": "CSAFPID-5713614" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0", "product": { "name": "vers:unknown/v0.20.0", "product_id": "CSAFPID-5713615" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0", "product": { "name": "vers:unknown/v0.21.0", "product_id": "CSAFPID-5713616" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0", "product": { "name": "vers:unknown/v0.22.0", "product_id": "CSAFPID-5713617" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0", "product": { "name": "vers:unknown/v0.23.0", "product_id": "CSAFPID-5713618" } }, { "category": "product_version_range", "name": "vers:unknown/v0.24.0", "product": { "name": "vers:unknown/v0.24.0", "product_id": "CSAFPID-5713619" } }, { "category": "product_version_range", "name": "vers:unknown/v0.25.0", "product": { "name": "vers:unknown/v0.25.0", "product_id": "CSAFPID-5713620" } }, { "category": "product_version_range", "name": "vers:unknown/v0.26.0", "product": { "name": "vers:unknown/v0.26.0", "product_id": "CSAFPID-5713621" } }, { "category": "product_version_range", "name": "vers:unknown/v0.27.0", "product": { "name": "vers:unknown/v0.27.0", "product_id": "CSAFPID-5713622" } }, { "category": "product_version_range", "name": "vers:unknown/v0.27.1", "product": { "name": "vers:unknown/v0.27.1", "product_id": "CSAFPID-5713623" } }, { "category": "product_version_range", "name": "vers:unknown/v0.28.0", "product": { "name": "vers:unknown/v0.28.0", "product_id": "CSAFPID-5713624" } }, { "category": "product_version_range", "name": "vers:unknown/v0.29.0", "product": { "name": "vers:unknown/v0.29.0", "product_id": "CSAFPID-5713625" } }, { "category": "product_version_range", "name": "vers:unknown/v0.29.1", "product": { "name": "vers:unknown/v0.29.1", "product_id": "CSAFPID-5713626" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.0", "product": { "name": "vers:unknown/v0.3.0", "product_id": "CSAFPID-5713627" } }, { "category": "product_version_range", "name": "vers:unknown/v0.30.0", "product": { "name": "vers:unknown/v0.30.0", "product_id": "CSAFPID-5713628" } }, { "category": "product_version_range", "name": "vers:unknown/v0.31.0", "product": { "name": "vers:unknown/v0.31.0", "product_id": "CSAFPID-5713629" } }, { "category": "product_version_range", "name": "vers:unknown/v0.31.1", "product": { "name": "vers:unknown/v0.31.1", "product_id": "CSAFPID-5713630" } }, { "category": "product_version_range", "name": "vers:unknown/v0.32.0", "product": { "name": "vers:unknown/v0.32.0", "product_id": "CSAFPID-5713631" } }, { "category": "product_version_range", "name": "vers:unknown/v0.33.0", "product": { "name": "vers:unknown/v0.33.0", "product_id": "CSAFPID-5713632" } }, { "category": "product_version_range", "name": "vers:unknown/v0.34.0", "product": { "name": "vers:unknown/v0.34.0", "product_id": "CSAFPID-5713633" } }, { "category": "product_version_range", "name": "vers:unknown/v0.35.0", "product": { "name": "vers:unknown/v0.35.0", "product_id": "CSAFPID-5713634" } }, { "category": "product_version_range", "name": "vers:unknown/v0.36.0", "product": { "name": "vers:unknown/v0.36.0", "product_id": "CSAFPID-5713635" } }, { "category": "product_version_range", "name": "vers:unknown/v0.37.0", "product": { "name": "vers:unknown/v0.37.0", "product_id": "CSAFPID-5713636" } }, { "category": "product_version_range", "name": "vers:unknown/v0.38.0", "product": { "name": "vers:unknown/v0.38.0", "product_id": "CSAFPID-5713637" } }, { "category": "product_version_range", "name": "vers:unknown/v0.39.0", "product": { "name": "vers:unknown/v0.39.0", "product_id": "CSAFPID-5713638" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0", "product": { "name": "vers:unknown/v0.4.0", "product_id": "CSAFPID-5713639" } }, { "category": "product_version_range", "name": "vers:unknown/v0.40.0", "product": { "name": "vers:unknown/v0.40.0", "product_id": "CSAFPID-5713640" } }, { "category": "product_version_range", "name": "vers:unknown/v0.41.0", "product": { "name": "vers:unknown/v0.41.0", "product_id": "CSAFPID-5713641" } }, { "category": "product_version_range", "name": "vers:unknown/v0.41.1", "product": { "name": "vers:unknown/v0.41.1", "product_id": "CSAFPID-5713642" } }, { "category": "product_version_range", "name": "vers:unknown/v0.42.0", "product": { "name": "vers:unknown/v0.42.0", "product_id": "CSAFPID-5713643" } }, { "category": "product_version_range", "name": "vers:unknown/v0.43.0", "product": { "name": "vers:unknown/v0.43.0", "product_id": "CSAFPID-5713644" } }, { "category": "product_version_range", "name": "vers:unknown/v0.44.0", "product": { "name": "vers:unknown/v0.44.0", "product_id": "CSAFPID-5713645" } }, { "category": "product_version_range", "name": "vers:unknown/v0.44.1", "product": { "name": "vers:unknown/v0.44.1", "product_id": "CSAFPID-5713646" } }, { "category": "product_version_range", "name": "vers:unknown/v0.44.2", "product": { "name": "vers:unknown/v0.44.2", "product_id": "CSAFPID-5713647" } }, { "category": "product_version_range", "name": "vers:unknown/v0.45.0", "product": { "name": "vers:unknown/v0.45.0", "product_id": "CSAFPID-5713648" } }, { "category": "product_version_range", "name": "vers:unknown/v0.45.1", "product": { "name": "vers:unknown/v0.45.1", "product_id": "CSAFPID-5713649" } }, { "category": "product_version_range", "name": "vers:unknown/v0.46.0", "product": { "name": "vers:unknown/v0.46.0", "product_id": "CSAFPID-5713650" } }, { "category": "product_version_range", "name": "vers:unknown/v0.47.0", "product": { "name": "vers:unknown/v0.47.0", "product_id": "CSAFPID-5713651" } }, { "category": "product_version_range", "name": "vers:unknown/v0.48.0", "product": { "name": "vers:unknown/v0.48.0", "product_id": "CSAFPID-5713652" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.0", "product": { "name": "vers:unknown/v0.5.0", "product_id": "CSAFPID-5713653" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.0", "product": { "name": "vers:unknown/v0.6.0", "product_id": "CSAFPID-5713654" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0", "product": { "name": "vers:unknown/v0.7.0", "product_id": "CSAFPID-5713655" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0", "product": { "name": "vers:unknown/v0.8.0", "product_id": "CSAFPID-5713656" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0", "product": { "name": "vers:unknown/v0.9.0", "product_id": "CSAFPID-5713657" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0", "product": { "name": "vers:unknown/v1.0.0", "product_id": "CSAFPID-5713658" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.0", "product": { "name": "vers:unknown/v1.0.0-alpha.0", "product_id": "CSAFPID-5713659" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.1", "product": { "name": "vers:unknown/v1.0.0-alpha.1", "product_id": "CSAFPID-5713660" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.10", "product": { "name": "vers:unknown/v1.0.0-alpha.10", "product_id": "CSAFPID-5713661" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.11", "product": { "name": "vers:unknown/v1.0.0-alpha.11", "product_id": "CSAFPID-5713662" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.12", "product": { "name": "vers:unknown/v1.0.0-alpha.12", "product_id": "CSAFPID-5713663" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.13", "product": { "name": "vers:unknown/v1.0.0-alpha.13", "product_id": "CSAFPID-5713664" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.14", "product": { "name": "vers:unknown/v1.0.0-alpha.14", "product_id": "CSAFPID-5713665" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.15", "product": { "name": "vers:unknown/v1.0.0-alpha.15", "product_id": "CSAFPID-5713666" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.16", "product": { "name": "vers:unknown/v1.0.0-alpha.16", "product_id": "CSAFPID-5713667" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.17", "product": { "name": "vers:unknown/v1.0.0-alpha.17", "product_id": "CSAFPID-5713668" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.18", "product": { "name": "vers:unknown/v1.0.0-alpha.18", "product_id": "CSAFPID-5713669" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.19", "product": { "name": "vers:unknown/v1.0.0-alpha.19", "product_id": "CSAFPID-5713670" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.2", "product": { "name": "vers:unknown/v1.0.0-alpha.2", "product_id": "CSAFPID-5713671" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.20", "product": { "name": "vers:unknown/v1.0.0-alpha.20", "product_id": "CSAFPID-5713672" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.21", "product": { "name": "vers:unknown/v1.0.0-alpha.21", "product_id": "CSAFPID-5713673" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.22", "product": { "name": "vers:unknown/v1.0.0-alpha.22", "product_id": "CSAFPID-5713674" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.23", "product": { "name": "vers:unknown/v1.0.0-alpha.23", "product_id": "CSAFPID-5713675" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.24", "product": { "name": "vers:unknown/v1.0.0-alpha.24", "product_id": "CSAFPID-5713676" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.25", "product": { "name": "vers:unknown/v1.0.0-alpha.25", "product_id": "CSAFPID-5713677" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.26", "product": { "name": "vers:unknown/v1.0.0-alpha.26", "product_id": "CSAFPID-5713678" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.27", "product": { "name": "vers:unknown/v1.0.0-alpha.27", "product_id": "CSAFPID-5713679" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.28", "product": { "name": "vers:unknown/v1.0.0-alpha.28", "product_id": "CSAFPID-5713680" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.29", "product": { "name": "vers:unknown/v1.0.0-alpha.29", "product_id": "CSAFPID-5713681" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.3", "product": { "name": "vers:unknown/v1.0.0-alpha.3", "product_id": "CSAFPID-5713682" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.30", "product": { "name": "vers:unknown/v1.0.0-alpha.30", "product_id": "CSAFPID-5713683" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.31", "product": { "name": "vers:unknown/v1.0.0-alpha.31", "product_id": "CSAFPID-5713684" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.32", "product": { "name": "vers:unknown/v1.0.0-alpha.32", "product_id": "CSAFPID-5713685" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.33", "product": { "name": "vers:unknown/v1.0.0-alpha.33", "product_id": "CSAFPID-5713686" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.34", "product": { "name": "vers:unknown/v1.0.0-alpha.34", "product_id": "CSAFPID-5713687" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.35", "product": { "name": "vers:unknown/v1.0.0-alpha.35", "product_id": "CSAFPID-5713688" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.36", "product": { "name": "vers:unknown/v1.0.0-alpha.36", "product_id": "CSAFPID-5713689" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.37", "product": { "name": "vers:unknown/v1.0.0-alpha.37", "product_id": "CSAFPID-5713690" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.38", "product": { "name": "vers:unknown/v1.0.0-alpha.38", "product_id": "CSAFPID-5713691" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.39", "product": { "name": "vers:unknown/v1.0.0-alpha.39", "product_id": "CSAFPID-5713692" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.4", "product": { "name": "vers:unknown/v1.0.0-alpha.4", "product_id": "CSAFPID-5713693" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.40", "product": { "name": "vers:unknown/v1.0.0-alpha.40", "product_id": "CSAFPID-5713694" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.41", "product": { "name": "vers:unknown/v1.0.0-alpha.41", "product_id": "CSAFPID-5713695" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.42", "product": { "name": "vers:unknown/v1.0.0-alpha.42", "product_id": "CSAFPID-5713696" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.43", "product": { "name": "vers:unknown/v1.0.0-alpha.43", "product_id": "CSAFPID-5713697" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.44", "product": { "name": "vers:unknown/v1.0.0-alpha.44", "product_id": "CSAFPID-5713698" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.45", "product": { "name": "vers:unknown/v1.0.0-alpha.45", "product_id": "CSAFPID-5713699" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.46", "product": { "name": "vers:unknown/v1.0.0-alpha.46", "product_id": "CSAFPID-5713700" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.5", "product": { "name": "vers:unknown/v1.0.0-alpha.5", "product_id": "CSAFPID-5713701" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.6", "product": { "name": "vers:unknown/v1.0.0-alpha.6", "product_id": "CSAFPID-5713702" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.7", "product": { "name": "vers:unknown/v1.0.0-alpha.7", "product_id": "CSAFPID-5713703" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.8", "product": { "name": "vers:unknown/v1.0.0-alpha.8", "product_id": "CSAFPID-5713704" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.9", "product": { "name": "vers:unknown/v1.0.0-alpha.9", "product_id": "CSAFPID-5713705" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1", "product": { "name": "vers:unknown/v1.0.1", "product_id": "CSAFPID-5713706" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.2", "product": { "name": "vers:unknown/v1.0.2", "product_id": "CSAFPID-5713707" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0", "product": { "name": "vers:unknown/v1.1.0", "product_id": "CSAFPID-5713708" } }, { "category": "product_version_range", "name": "vers:unknown/v1.10.0", "product": { "name": "vers:unknown/v1.10.0", "product_id": "CSAFPID-5713709" } }, { "category": "product_version_range", "name": "vers:unknown/v1.11.0", "product": { "name": "vers:unknown/v1.11.0", "product_id": "CSAFPID-5713710" } }, { "category": "product_version_range", "name": "vers:unknown/v1.12.0", "product": { "name": "vers:unknown/v1.12.0", "product_id": "CSAFPID-5713711" } }, { "category": "product_version_range", "name": "vers:unknown/v1.13.0", "product": { "name": "vers:unknown/v1.13.0", "product_id": "CSAFPID-5713712" } }, { "category": "product_version_range", "name": "vers:unknown/v1.13.1", "product": { "name": "vers:unknown/v1.13.1", "product_id": "CSAFPID-5713713" } }, { "category": "product_version_range", "name": "vers:unknown/v1.14.0", "product": { "name": "vers:unknown/v1.14.0", "product_id": "CSAFPID-5713714" } }, { "category": "product_version_range", "name": "vers:unknown/v1.15.0", "product": { "name": "vers:unknown/v1.15.0", "product_id": "CSAFPID-5713715" } }, { "category": "product_version_range", "name": "vers:unknown/v1.15.1", "product": { "name": "vers:unknown/v1.15.1", "product_id": "CSAFPID-5713716" } }, { "category": "product_version_range", "name": "vers:unknown/v1.16.0", "product": { "name": "vers:unknown/v1.16.0", "product_id": "CSAFPID-5713717" } }, { "category": "product_version_range", "name": "vers:unknown/v1.16.1", "product": { "name": "vers:unknown/v1.16.1", "product_id": "CSAFPID-5713718" } }, { "category": "product_version_range", "name": "vers:unknown/v1.16.2", "product": { "name": "vers:unknown/v1.16.2", "product_id": "CSAFPID-5713719" } }, { "category": "product_version_range", "name": "vers:unknown/v1.16.3", "product": { "name": "vers:unknown/v1.16.3", "product_id": "CSAFPID-5713720" } }, { "category": "product_version_range", "name": "vers:unknown/v1.17.0", "product": { "name": "vers:unknown/v1.17.0", "product_id": "CSAFPID-5713721" } }, { "category": "product_version_range", "name": "vers:unknown/v1.17.1", "product": { "name": "vers:unknown/v1.17.1", "product_id": "CSAFPID-5713722" } }, { "category": "product_version_range", "name": "vers:unknown/v1.17.2", "product": { "name": "vers:unknown/v1.17.2", "product_id": "CSAFPID-5713723" } }, { "category": "product_version_range", "name": "vers:unknown/v1.17.3", "product": { "name": "vers:unknown/v1.17.3", "product_id": "CSAFPID-5713724" } }, { "category": "product_version_range", "name": "vers:unknown/v1.18.0", "product": { "name": "vers:unknown/v1.18.0", "product_id": "CSAFPID-5713725" } }, { "category": "product_version_range", "name": "vers:unknown/v1.18.1", "product": { "name": "vers:unknown/v1.18.1", "product_id": "CSAFPID-5713726" } }, { "category": "product_version_range", "name": "vers:unknown/v1.19.0", "product": { "name": "vers:unknown/v1.19.0", "product_id": "CSAFPID-5713727" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0", "product": { "name": "vers:unknown/v1.2.0", "product_id": "CSAFPID-5713728" } }, { "category": "product_version_range", "name": "vers:unknown/v1.20.0", "product": { "name": "vers:unknown/v1.20.0", "product_id": "CSAFPID-5713729" } }, { "category": "product_version_range", "name": "vers:unknown/v1.20.1", "product": { "name": "vers:unknown/v1.20.1", "product_id": "CSAFPID-5713730" } }, { "category": "product_version_range", "name": "vers:unknown/v1.21.0", "product": { "name": "vers:unknown/v1.21.0", "product_id": "CSAFPID-5713731" } }, { "category": "product_version_range", "name": "vers:unknown/v1.21.1", "product": { "name": "vers:unknown/v1.21.1", "product_id": "CSAFPID-5713732" } }, { "category": "product_version_range", "name": "vers:unknown/v1.22.0", "product": { "name": "vers:unknown/v1.22.0", "product_id": "CSAFPID-5713733" } }, { "category": "product_version_range", "name": "vers:unknown/v1.22.1", "product": { "name": "vers:unknown/v1.22.1", "product_id": "CSAFPID-5713734" } }, { "category": "product_version_range", "name": "vers:unknown/v1.23.0", "product": { "name": "vers:unknown/v1.23.0", "product_id": "CSAFPID-5713735" } }, { "category": "product_version_range", "name": "vers:unknown/v1.23.1", "product": { "name": "vers:unknown/v1.23.1", "product_id": "CSAFPID-5713736" } }, { "category": "product_version_range", "name": "vers:unknown/v1.24.0", "product": { "name": "vers:unknown/v1.24.0", "product_id": "CSAFPID-5713737" } }, { "category": "product_version_range", "name": "vers:unknown/v1.25.0", "product": { "name": "vers:unknown/v1.25.0", "product_id": "CSAFPID-5713738" } }, { "category": "product_version_range", "name": "vers:unknown/v1.26.0", "product": { "name": "vers:unknown/v1.26.0", "product_id": "CSAFPID-5713739" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0", "product": { "name": "vers:unknown/v1.3.0", "product_id": "CSAFPID-5713740" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0", "product": { "name": "vers:unknown/v1.4.0", "product_id": "CSAFPID-5713741" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0", "product": { "name": "vers:unknown/v1.5.0", "product_id": "CSAFPID-5713742" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.1", "product": { "name": "vers:unknown/v1.5.1", "product_id": "CSAFPID-5713743" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.0", "product": { "name": "vers:unknown/v1.6.0", "product_id": "CSAFPID-5713744" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0", "product": { "name": "vers:unknown/v1.7.0", "product_id": "CSAFPID-5713745" } }, { "category": "product_version_range", "name": "vers:unknown/v1.8.0", "product": { "name": "vers:unknown/v1.8.0", "product_id": "CSAFPID-5713746" } }, { "category": "product_version_range", "name": "vers:unknown/v1.9.0", "product": { "name": "vers:unknown/v1.9.0", "product_id": "CSAFPID-5713747" } } ], "category": "product_name", "name": "tfplan2md" } ], "category": "vendor", "name": "oocx" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27640", "cwe": { "id": "CWE-212", "name": "Improper Removal of Sensitive Information Before Storage or Transfer" }, "notes": [ { "category": "description", "text": "tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports. Prior to version 1.26.1, a bug in tfplan2md affected several distinct rendering paths: AzApi resource body properties, AzureDevOps variable groups, Scriban template context variables, and hierarchical sensitivity detection. This caused reports to render values that should have been masked as \"(sensitive)\" instead. This issue is fixed in v1.26.1. No known workarounds are available.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27640" }, { "category": "description", "text": "tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports. Prior to version 1.26.1, a bug in tfplan2md affected several distinct rendering paths: AzApi resource body properties, AzureDevOps variable groups, Scriban template context variables, and hierarchical sensitivity detection. This caused reports to render values that should have been masked as \"(sensitive)\" instead. This issue is fixed in v1.26.1. No known workarounds are available.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27640" }, { "category": "description", "text": "tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports. Prior to version 1.26.1, a bug in tfplan2md affected several distinct rendering paths: AzApi resource body properties, AzureDevOps variable groups, Scriban template context variables, and hierarchical sensitivity detection. This caused reports to render values that should have been masked as \"(sensitive)\" instead. This issue is fixed in v1.26.1. No known workarounds are available.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27640.json?alt=media" }, { "category": "other", "text": "0.00036", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "8.5", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.5", "title": "NCSC Score" }, { "category": "other", "text": "The value of the most recent EPSS score, There is cwe data available from source Nvd", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5700892", "CSAFPID-5713593", "CSAFPID-5713594", "CSAFPID-5713595", "CSAFPID-5713596", "CSAFPID-5713597", "CSAFPID-5713598", "CSAFPID-5713599", "CSAFPID-5713600", "CSAFPID-5713601", "CSAFPID-5713602", "CSAFPID-5713603", "CSAFPID-5713604", "CSAFPID-5713605", "CSAFPID-5713606", "CSAFPID-5713607", "CSAFPID-5713608", "CSAFPID-5713609", "CSAFPID-5713610", "CSAFPID-5713611", "CSAFPID-5713612", "CSAFPID-5713613", "CSAFPID-5713614", "CSAFPID-5713615", "CSAFPID-5713616", "CSAFPID-5713617", "CSAFPID-5713618", "CSAFPID-5713619", "CSAFPID-5713620", "CSAFPID-5713621", "CSAFPID-5713622", "CSAFPID-5713623", "CSAFPID-5713624", "CSAFPID-5713625", "CSAFPID-5713626", "CSAFPID-5713627", "CSAFPID-5713628", "CSAFPID-5713629", "CSAFPID-5713630", "CSAFPID-5713631", "CSAFPID-5713632", "CSAFPID-5713633", "CSAFPID-5713634", "CSAFPID-5713635", "CSAFPID-5713636", "CSAFPID-5713637", "CSAFPID-5713638", "CSAFPID-5713639", "CSAFPID-5713640", "CSAFPID-5713641", "CSAFPID-5713642", "CSAFPID-5713643", "CSAFPID-5713644", "CSAFPID-5713645", "CSAFPID-5713646", "CSAFPID-5713647", "CSAFPID-5713648", "CSAFPID-5713649", "CSAFPID-5713650", "CSAFPID-5713651", "CSAFPID-5713652", "CSAFPID-5713653", "CSAFPID-5713654", "CSAFPID-5713655", "CSAFPID-5713656", "CSAFPID-5713657", "CSAFPID-5713658", "CSAFPID-5713659", "CSAFPID-5713660", "CSAFPID-5713661", "CSAFPID-5713662", "CSAFPID-5713663", "CSAFPID-5713664", "CSAFPID-5713665", "CSAFPID-5713666", "CSAFPID-5713667", "CSAFPID-5713668", "CSAFPID-5713669", "CSAFPID-5713670", "CSAFPID-5713671", "CSAFPID-5713672", "CSAFPID-5713673", "CSAFPID-5713674", "CSAFPID-5713675", "CSAFPID-5713676", "CSAFPID-5713677", "CSAFPID-5713678", "CSAFPID-5713679", "CSAFPID-5713680", "CSAFPID-5713681", "CSAFPID-5713682", "CSAFPID-5713683", "CSAFPID-5713684", "CSAFPID-5713685", "CSAFPID-5713686", "CSAFPID-5713687", "CSAFPID-5713688", "CSAFPID-5713689", "CSAFPID-5713690", "CSAFPID-5713691", "CSAFPID-5713692", "CSAFPID-5713693", "CSAFPID-5713694", "CSAFPID-5713695", "CSAFPID-5713696", "CSAFPID-5713697", "CSAFPID-5713698", "CSAFPID-5713699", "CSAFPID-5713700", "CSAFPID-5713701", "CSAFPID-5713702", "CSAFPID-5713703", "CSAFPID-5713704", "CSAFPID-5713705", "CSAFPID-5713706", "CSAFPID-5713707", "CSAFPID-5713708", "CSAFPID-5713709", "CSAFPID-5713710", "CSAFPID-5713711", "CSAFPID-5713712", "CSAFPID-5713713", "CSAFPID-5713714", "CSAFPID-5713715", "CSAFPID-5713716", "CSAFPID-5713717", "CSAFPID-5713718", "CSAFPID-5713719", "CSAFPID-5713720", "CSAFPID-5713721", "CSAFPID-5713722", "CSAFPID-5713723", "CSAFPID-5713724", "CSAFPID-5713725", "CSAFPID-5713726", "CSAFPID-5713727", "CSAFPID-5713728", "CSAFPID-5713729", "CSAFPID-5713730", "CSAFPID-5713731", "CSAFPID-5713732", "CSAFPID-5713733", "CSAFPID-5713734", "CSAFPID-5713735", "CSAFPID-5713736", "CSAFPID-5713737", "CSAFPID-5713738", "CSAFPID-5713739", "CSAFPID-5713740", "CSAFPID-5713741", "CSAFPID-5713742", "CSAFPID-5713743", "CSAFPID-5713744", "CSAFPID-5713745", "CSAFPID-5713746", "CSAFPID-5713747" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27640" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27640" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27640" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27640.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27640" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27640.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/oocx/tfplan2md/releases/tag/v1.26.1" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/oocx/tfplan2md/security/advisories/GHSA-5j8r-g94q-2f39" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27640.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27640" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-5700892", "CSAFPID-5713593", "CSAFPID-5713594", "CSAFPID-5713595", "CSAFPID-5713596", "CSAFPID-5713597", "CSAFPID-5713598", "CSAFPID-5713599", "CSAFPID-5713600", "CSAFPID-5713601", "CSAFPID-5713602", "CSAFPID-5713603", "CSAFPID-5713604", "CSAFPID-5713605", "CSAFPID-5713606", "CSAFPID-5713607", "CSAFPID-5713608", "CSAFPID-5713609", "CSAFPID-5713610", "CSAFPID-5713611", "CSAFPID-5713612", "CSAFPID-5713613", "CSAFPID-5713614", "CSAFPID-5713615", "CSAFPID-5713616", "CSAFPID-5713617", "CSAFPID-5713618", "CSAFPID-5713619", "CSAFPID-5713620", "CSAFPID-5713621", "CSAFPID-5713622", "CSAFPID-5713623", "CSAFPID-5713624", "CSAFPID-5713625", "CSAFPID-5713626", "CSAFPID-5713627", "CSAFPID-5713628", "CSAFPID-5713629", "CSAFPID-5713630", "CSAFPID-5713631", "CSAFPID-5713632", "CSAFPID-5713633", "CSAFPID-5713634", "CSAFPID-5713635", "CSAFPID-5713636", "CSAFPID-5713637", "CSAFPID-5713638", "CSAFPID-5713639", "CSAFPID-5713640", "CSAFPID-5713641", "CSAFPID-5713642", "CSAFPID-5713643", "CSAFPID-5713644", "CSAFPID-5713645", "CSAFPID-5713646", "CSAFPID-5713647", "CSAFPID-5713648", "CSAFPID-5713649", "CSAFPID-5713650", "CSAFPID-5713651", "CSAFPID-5713652", "CSAFPID-5713653", "CSAFPID-5713654", "CSAFPID-5713655", "CSAFPID-5713656", "CSAFPID-5713657", "CSAFPID-5713658", "CSAFPID-5713659", "CSAFPID-5713660", "CSAFPID-5713661", "CSAFPID-5713662", "CSAFPID-5713663", "CSAFPID-5713664", "CSAFPID-5713665", "CSAFPID-5713666", "CSAFPID-5713667", "CSAFPID-5713668", "CSAFPID-5713669", "CSAFPID-5713670", "CSAFPID-5713671", "CSAFPID-5713672", "CSAFPID-5713673", "CSAFPID-5713674", "CSAFPID-5713675", "CSAFPID-5713676", "CSAFPID-5713677", "CSAFPID-5713678", "CSAFPID-5713679", "CSAFPID-5713680", "CSAFPID-5713681", "CSAFPID-5713682", "CSAFPID-5713683", "CSAFPID-5713684", "CSAFPID-5713685", "CSAFPID-5713686", "CSAFPID-5713687", "CSAFPID-5713688", "CSAFPID-5713689", "CSAFPID-5713690", "CSAFPID-5713691", "CSAFPID-5713692", "CSAFPID-5713693", "CSAFPID-5713694", "CSAFPID-5713695", "CSAFPID-5713696", "CSAFPID-5713697", "CSAFPID-5713698", "CSAFPID-5713699", "CSAFPID-5713700", "CSAFPID-5713701", "CSAFPID-5713702", "CSAFPID-5713703", "CSAFPID-5713704", "CSAFPID-5713705", "CSAFPID-5713706", "CSAFPID-5713707", "CSAFPID-5713708", "CSAFPID-5713709", "CSAFPID-5713710", "CSAFPID-5713711", "CSAFPID-5713712", "CSAFPID-5713713", "CSAFPID-5713714", "CSAFPID-5713715", "CSAFPID-5713716", "CSAFPID-5713717", "CSAFPID-5713718", "CSAFPID-5713719", "CSAFPID-5713720", "CSAFPID-5713721", "CSAFPID-5713722", "CSAFPID-5713723", "CSAFPID-5713724", "CSAFPID-5713725", "CSAFPID-5713726", "CSAFPID-5713727", "CSAFPID-5713728", "CSAFPID-5713729", "CSAFPID-5713730", "CSAFPID-5713731", "CSAFPID-5713732", "CSAFPID-5713733", "CSAFPID-5713734", "CSAFPID-5713735", "CSAFPID-5713736", "CSAFPID-5713737", "CSAFPID-5713738", "CSAFPID-5713739", "CSAFPID-5713740", "CSAFPID-5713741", "CSAFPID-5713742", "CSAFPID-5713743", "CSAFPID-5713744", "CSAFPID-5713745", "CSAFPID-5713746", "CSAFPID-5713747" ] } ], "title": "CVE-2026-27640" } ] }