{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27963", "tracking": { "current_release_date": "2026-03-23T03:43:23.058036Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27963", "initial_release_date": "2026-02-26T03:26:31.686659Z", "revision_history": [ { "date": "2026-02-26T03:26:31.686659Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-02-26T03:26:38.064353Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-26T03:38:40.758497Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-02-26T03:38:42.772485Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-26T07:34:45.652602Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-02-26T14:13:20.139082Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-26T14:13:23.012737Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-02-26T15:49:11.024514Z", "number": "8", "summary": "Unknown change." }, { "date": "2026-02-26T22:30:17.653961Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-02-27T17:26:07.706027Z", "number": "10", "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-02-27T17:26:10.336827Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-02-28T14:00:02.835109Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (152).| Products created (4).| References created (4).| CWES updated (1)." }, { "date": "2026-03-20T09:39:17.577990Z", "number": "13", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:39:20.686506Z", "number": "14", "summary": "NCSC Score updated." } ], "status": "interim", "version": "14" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.9.61-beta", "product": { "name": "vers:unknown/0.9.61-beta", "product_id": "CSAFPID-3629563" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.61-beta.0", "product": { "name": "vers:unknown/0.9.61-beta.0", "product_id": "CSAFPID-3629564" } }, { "category": "product_version_range", "name": "vers:unknown/<2.32.0", "product": { "name": "vers:unknown/<2.32.0", "product_id": "CSAFPID-5724969" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0", "product": { "name": "vers:unknown/v1.0.0", "product_id": "CSAFPID-3629565" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.10", "product": { "name": "vers:unknown/v1.1.10", "product_id": "CSAFPID-3629566" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.11", "product": { "name": "vers:unknown/v1.1.11", "product_id": "CSAFPID-3629567" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.12", "product": { "name": "vers:unknown/v1.1.12", "product_id": "CSAFPID-3629568" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.13", "product": { "name": "vers:unknown/v1.1.13", "product_id": "CSAFPID-3629569" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.14", "product": { "name": "vers:unknown/v1.1.14", "product_id": "CSAFPID-3629570" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.15", "product": { "name": "vers:unknown/v1.1.15", "product_id": "CSAFPID-3629571" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.8", "product": { "name": "vers:unknown/v1.1.8", "product_id": "CSAFPID-3629572" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.9", "product": { "name": "vers:unknown/v1.1.9", "product_id": "CSAFPID-3629573" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.1", "product": { "name": "vers:unknown/v1.2.1", "product_id": "CSAFPID-3629574" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.4", "product": { "name": "vers:unknown/v1.2.4", "product_id": "CSAFPID-3629575" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.5", "product": { "name": "vers:unknown/v1.2.5", "product_id": "CSAFPID-3629576" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.6", "product": { "name": "vers:unknown/v1.2.6", "product_id": "CSAFPID-3629577" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.8", "product": { "name": "vers:unknown/v1.2.8", "product_id": "CSAFPID-3629578" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.1", "product": { "name": "vers:unknown/v1.3.1", "product_id": "CSAFPID-3629579" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.3", "product": { "name": "vers:unknown/v1.3.3", "product_id": "CSAFPID-3629580" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.4", "product": { "name": "vers:unknown/v1.3.4", "product_id": "CSAFPID-3629581" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0", "product": { "name": "vers:unknown/v1.4.0", "product_id": "CSAFPID-3629582" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.1", "product": { "name": "vers:unknown/v1.4.1", "product_id": "CSAFPID-3629583" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.11", "product": { "name": "vers:unknown/v1.4.11", "product_id": "CSAFPID-3629584" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.2", "product": { "name": "vers:unknown/v1.4.2", "product_id": "CSAFPID-3629585" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.4", "product": { "name": "vers:unknown/v1.4.4", "product_id": "CSAFPID-3629586" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.6", "product": { "name": "vers:unknown/v1.4.6", "product_id": "CSAFPID-3629587" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.7", "product": { "name": "vers:unknown/v1.4.7", "product_id": "CSAFPID-3629588" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.9", "product": { "name": "vers:unknown/v1.4.9", "product_id": "CSAFPID-3629589" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0", "product": { "name": "vers:unknown/v1.5.0", "product_id": "CSAFPID-3629590" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.5", "product": { "name": "vers:unknown/v1.5.5", "product_id": "CSAFPID-3629591" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.0", "product": { "name": "vers:unknown/v1.6.0", "product_id": "CSAFPID-3629592" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0", "product": { "name": "vers:unknown/v1.7.0", "product_id": "CSAFPID-3629593" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.1", "product": { "name": "vers:unknown/v1.7.1", "product_id": "CSAFPID-3629594" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.2", "product": { "name": "vers:unknown/v1.7.2", "product_id": "CSAFPID-3629595" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.1", "product": { "name": "vers:unknown/v2.0.1", "product_id": "CSAFPID-3629596" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.10", "product": { "name": "vers:unknown/v2.0.10", "product_id": "CSAFPID-3629597" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.11", "product": { "name": "vers:unknown/v2.0.11", "product_id": "CSAFPID-3629598" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.12", "product": { "name": "vers:unknown/v2.0.12", "product_id": "CSAFPID-3629599" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.13", "product": { "name": "vers:unknown/v2.0.13", "product_id": "CSAFPID-3629600" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.14", "product": { "name": "vers:unknown/v2.0.14", "product_id": "CSAFPID-3629601" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.15", "product": { "name": "vers:unknown/v2.0.15", "product_id": "CSAFPID-3629602" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.16", "product": { "name": "vers:unknown/v2.0.16", "product_id": "CSAFPID-3629603" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.17", "product": { "name": "vers:unknown/v2.0.17", "product_id": "CSAFPID-3629604" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.18", "product": { "name": "vers:unknown/v2.0.18", "product_id": "CSAFPID-3629605" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.19", "product": { "name": "vers:unknown/v2.0.19", "product_id": "CSAFPID-3629606" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.2", "product": { "name": "vers:unknown/v2.0.2", "product_id": "CSAFPID-3629607" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.20", "product": { "name": "vers:unknown/v2.0.20", "product_id": "CSAFPID-3629608" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.21", "product": { "name": "vers:unknown/v2.0.21", "product_id": "CSAFPID-3629609" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.22", "product": { "name": "vers:unknown/v2.0.22", "product_id": "CSAFPID-3629610" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.23", "product": { "name": "vers:unknown/v2.0.23", "product_id": "CSAFPID-3629611" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.24", "product": { "name": "vers:unknown/v2.0.24", "product_id": "CSAFPID-3629612" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.3", "product": { "name": "vers:unknown/v2.0.3", "product_id": "CSAFPID-3629613" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.4", "product": { "name": "vers:unknown/v2.0.4", "product_id": "CSAFPID-3629614" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.5", "product": { "name": "vers:unknown/v2.0.5", "product_id": "CSAFPID-3629615" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.6", "product": { "name": "vers:unknown/v2.0.6", "product_id": "CSAFPID-3629616" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.7", "product": { "name": "vers:unknown/v2.0.7", "product_id": "CSAFPID-3629617" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.8", "product": { "name": "vers:unknown/v2.0.8", "product_id": "CSAFPID-3629618" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.9", "product": { "name": "vers:unknown/v2.0.9", "product_id": "CSAFPID-3629619" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.0", "product": { "name": "vers:unknown/v2.1.0", "product_id": "CSAFPID-3629620" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.1", "product": { "name": "vers:unknown/v2.1.1", "product_id": "CSAFPID-3629621" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.2", "product": { "name": "vers:unknown/v2.1.2", "product_id": "CSAFPID-3629622" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.3", "product": { "name": "vers:unknown/v2.1.3", "product_id": "CSAFPID-3629623" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.4", "product": { "name": "vers:unknown/v2.1.4", "product_id": "CSAFPID-3629624" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.5", "product": { "name": "vers:unknown/v2.1.5", "product_id": "CSAFPID-3629625" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.0", "product": { "name": "vers:unknown/v2.10.0", "product_id": "CSAFPID-3676742" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.1", "product": { "name": "vers:unknown/v2.10.1", "product_id": "CSAFPID-3676743" } }, { "category": "product_version_range", "name": "vers:unknown/v2.11.0", "product": { "name": "vers:unknown/v2.11.0", "product_id": "CSAFPID-3676744" } }, { "category": "product_version_range", "name": "vers:unknown/v2.12.0", "product": { "name": "vers:unknown/v2.12.0", "product_id": "CSAFPID-3676745" } }, { "category": "product_version_range", "name": "vers:unknown/v2.12.1", "product": { "name": "vers:unknown/v2.12.1", "product_id": "CSAFPID-3676746" } }, { "category": "product_version_range", "name": "vers:unknown/v2.12.2", "product": { "name": "vers:unknown/v2.12.2", "product_id": "CSAFPID-3676747" } }, { "category": "product_version_range", "name": "vers:unknown/v2.12.3", "product": { "name": "vers:unknown/v2.12.3", "product_id": "CSAFPID-3676748" } }, { "category": "product_version_range", "name": "vers:unknown/v2.13.0", "product": { "name": "vers:unknown/v2.13.0", "product_id": "CSAFPID-3676749" } }, { "category": "product_version_range", "name": "vers:unknown/v2.13.1", "product": { "name": "vers:unknown/v2.13.1", "product_id": "CSAFPID-3676750" } }, { "category": "product_version_range", "name": "vers:unknown/v2.13.2", "product": { "name": "vers:unknown/v2.13.2", "product_id": "CSAFPID-3676751" } }, { "category": "product_version_range", "name": "vers:unknown/v2.13.3", "product": { "name": "vers:unknown/v2.13.3", "product_id": "CSAFPID-3676752" } }, { "category": "product_version_range", "name": "vers:unknown/v2.13.4", "product": { "name": "vers:unknown/v2.13.4", "product_id": "CSAFPID-3676753" } }, { "category": "product_version_range", "name": "vers:unknown/v2.14.0", "product": { "name": "vers:unknown/v2.14.0", "product_id": "CSAFPID-3676754" } }, { "category": "product_version_range", "name": "vers:unknown/v2.15.0", "product": { "name": "vers:unknown/v2.15.0", "product_id": "CSAFPID-3676755" } }, { "category": "product_version_range", "name": "vers:unknown/v2.15.1", "product": { "name": "vers:unknown/v2.15.1", "product_id": "CSAFPID-3676756" } }, { "category": "product_version_range", "name": "vers:unknown/v2.16.0", "product": { "name": "vers:unknown/v2.16.0", "product_id": "CSAFPID-3676757" } }, { "category": "product_version_range", "name": "vers:unknown/v2.16.1", "product": { "name": "vers:unknown/v2.16.1", "product_id": "CSAFPID-3676758" } }, { "category": "product_version_range", "name": "vers:unknown/v2.16.2", "product": { "name": "vers:unknown/v2.16.2", "product_id": "CSAFPID-3676759" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.0", "product": { "name": "vers:unknown/v2.17.0", "product_id": "CSAFPID-3676760" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.1", "product": { "name": "vers:unknown/v2.17.1", "product_id": "CSAFPID-3676761" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.2", "product": { "name": "vers:unknown/v2.17.2", "product_id": "CSAFPID-3676762" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.3", "product": { "name": "vers:unknown/v2.17.3", "product_id": "CSAFPID-3676763" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.4", "product": { "name": "vers:unknown/v2.17.4", "product_id": "CSAFPID-3676764" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.5", "product": { "name": "vers:unknown/v2.17.5", "product_id": "CSAFPID-3676765" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.6", "product": { "name": "vers:unknown/v2.17.6", "product_id": "CSAFPID-3676766" } }, { "category": "product_version_range", "name": "vers:unknown/v2.17.7", "product": { "name": "vers:unknown/v2.17.7", "product_id": "CSAFPID-3676767" } }, { "category": "product_version_range", "name": "vers:unknown/v2.18.0", "product": { "name": "vers:unknown/v2.18.0", "product_id": "CSAFPID-3676768" } }, { "category": "product_version_range", "name": "vers:unknown/v2.18.1", "product": { "name": "vers:unknown/v2.18.1", "product_id": "CSAFPID-3676769" } }, { "category": "product_version_range", "name": "vers:unknown/v2.19.0", "product": { "name": "vers:unknown/v2.19.0", "product_id": "CSAFPID-3676770" } }, { "category": "product_version_range", "name": "vers:unknown/v2.19.1", "product": { "name": "vers:unknown/v2.19.1", "product_id": "CSAFPID-3676771" } }, { "category": "product_version_range", "name": "vers:unknown/v2.19.2", "product": { "name": "vers:unknown/v2.19.2", "product_id": "CSAFPID-3676772" } }, { "category": "product_version_range", "name": "vers:unknown/v2.19.3", "product": { "name": "vers:unknown/v2.19.3", "product_id": "CSAFPID-3676773" } }, { "category": "product_version_range", "name": "vers:unknown/v2.19.4", "product": { "name": "vers:unknown/v2.19.4", "product_id": "CSAFPID-3676774" } }, { "category": "product_version_range", "name": "vers:unknown/v2.19.5", "product": { "name": "vers:unknown/v2.19.5", "product_id": "CSAFPID-3676775" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0", "product": { "name": "vers:unknown/v2.2.0", "product_id": "CSAFPID-3629626" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.1", "product": { "name": "vers:unknown/v2.2.1", "product_id": "CSAFPID-3629627" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.10", "product": { "name": "vers:unknown/v2.2.10", "product_id": "CSAFPID-3629628" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.11", "product": { "name": "vers:unknown/v2.2.11", "product_id": "CSAFPID-3629629" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.12", "product": { "name": "vers:unknown/v2.2.12", "product_id": "CSAFPID-3629630" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.13", "product": { "name": "vers:unknown/v2.2.13", "product_id": "CSAFPID-3629631" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.14", "product": { "name": "vers:unknown/v2.2.14", "product_id": "CSAFPID-3629632" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.15", "product": { "name": "vers:unknown/v2.2.15", "product_id": "CSAFPID-3629633" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.16", "product": { "name": "vers:unknown/v2.2.16", "product_id": "CSAFPID-3629634" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.17", "product": { "name": "vers:unknown/v2.2.17", "product_id": "CSAFPID-3629635" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.18", "product": { "name": "vers:unknown/v2.2.18", "product_id": "CSAFPID-3629636" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.19", "product": { "name": "vers:unknown/v2.2.19", "product_id": "CSAFPID-3629637" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.2", "product": { "name": "vers:unknown/v2.2.2", "product_id": "CSAFPID-3629638" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.20", "product": { "name": "vers:unknown/v2.2.20", "product_id": "CSAFPID-3629639" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.21", "product": { "name": "vers:unknown/v2.2.21", "product_id": "CSAFPID-3629640" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.22", "product": { "name": "vers:unknown/v2.2.22", "product_id": "CSAFPID-3629641" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.23", "product": { "name": "vers:unknown/v2.2.23", "product_id": "CSAFPID-3629642" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.3", "product": { "name": "vers:unknown/v2.2.3", "product_id": "CSAFPID-3629643" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.4", "product": { "name": "vers:unknown/v2.2.4", "product_id": "CSAFPID-3629644" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.5", "product": { "name": "vers:unknown/v2.2.5", "product_id": "CSAFPID-3629645" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.6", "product": { "name": "vers:unknown/v2.2.6", "product_id": "CSAFPID-3629646" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.7", "product": { "name": "vers:unknown/v2.2.7", "product_id": "CSAFPID-3629647" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.8", "product": { "name": "vers:unknown/v2.2.8", "product_id": "CSAFPID-3629648" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.9", "product": { "name": "vers:unknown/v2.2.9", "product_id": "CSAFPID-3629649" } }, { "category": "product_version_range", "name": "vers:unknown/v2.20.0", "product": { "name": "vers:unknown/v2.20.0", "product_id": "CSAFPID-3676776" } }, { "category": "product_version_range", "name": "vers:unknown/v2.21.0", "product": { "name": "vers:unknown/v2.21.0", "product_id": "CSAFPID-3726157" } }, { "category": "product_version_range", "name": "vers:unknown/v2.22.0", "product": { "name": "vers:unknown/v2.22.0", "product_id": "CSAFPID-3726158" } }, { "category": "product_version_range", "name": "vers:unknown/v2.23.0", "product": { "name": "vers:unknown/v2.23.0", "product_id": "CSAFPID-3726159" } }, { "category": "product_version_range", "name": "vers:unknown/v2.24.0", "product": { "name": "vers:unknown/v2.24.0", "product_id": "CSAFPID-3726160" } }, { "category": "product_version_range", "name": "vers:unknown/v2.25.0", "product": { "name": "vers:unknown/v2.25.0", "product_id": "CSAFPID-3726161" } }, { "category": "product_version_range", "name": "vers:unknown/v2.25.1", "product": { "name": "vers:unknown/v2.25.1", "product_id": "CSAFPID-3726162" } }, { "category": "product_version_range", "name": "vers:unknown/v2.26.0", "product": { "name": "vers:unknown/v2.26.0", "product_id": "CSAFPID-3726163" } }, { "category": "product_version_range", "name": "vers:unknown/v2.26.1", "product": { "name": "vers:unknown/v2.26.1", "product_id": "CSAFPID-3726164" } }, { "category": "product_version_range", "name": "vers:unknown/v2.26.2", "product": { "name": "vers:unknown/v2.26.2", "product_id": "CSAFPID-3726165" } }, { "category": "product_version_range", "name": "vers:unknown/v2.26.3", "product": { "name": "vers:unknown/v2.26.3", "product_id": "CSAFPID-3726166" } }, { "category": "product_version_range", "name": "vers:unknown/v2.27.0", "product": { "name": "vers:unknown/v2.27.0", "product_id": "CSAFPID-3726167" } }, { "category": "product_version_range", "name": "vers:unknown/v2.28.0", "product": { "name": "vers:unknown/v2.28.0", "product_id": "CSAFPID-5749538" } }, { "category": "product_version_range", "name": "vers:unknown/v2.29.0", "product": { "name": "vers:unknown/v2.29.0", "product_id": "CSAFPID-5749539" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.0", "product": { "name": "vers:unknown/v2.3.0", "product_id": "CSAFPID-3629650" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.1", "product": { "name": "vers:unknown/v2.3.1", "product_id": "CSAFPID-3629651" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.2", "product": { "name": "vers:unknown/v2.3.2", "product_id": "CSAFPID-3629652" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.3", "product": { "name": "vers:unknown/v2.3.3", "product_id": "CSAFPID-3629653" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.4", "product": { "name": "vers:unknown/v2.3.4", "product_id": "CSAFPID-3629654" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.5", "product": { "name": "vers:unknown/v2.3.5", "product_id": "CSAFPID-3629655" } }, { "category": "product_version_range", "name": "vers:unknown/v2.30.0", "product": { "name": "vers:unknown/v2.30.0", "product_id": "CSAFPID-5749540" } }, { "category": "product_version_range", "name": "vers:unknown/v2.31.0", "product": { "name": "vers:unknown/v2.31.0", "product_id": "CSAFPID-5749541" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.0", "product": { "name": "vers:unknown/v2.4.0", "product_id": "CSAFPID-3629656" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.1", "product": { "name": "vers:unknown/v2.4.1", "product_id": "CSAFPID-3629657" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.2", "product": { "name": "vers:unknown/v2.4.2", "product_id": "CSAFPID-3629658" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.3", "product": { "name": "vers:unknown/v2.4.3", "product_id": "CSAFPID-3629659" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.4", "product": { "name": "vers:unknown/v2.4.4", "product_id": "CSAFPID-3629660" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.0", "product": { "name": "vers:unknown/v2.5.0", "product_id": "CSAFPID-3629661" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0", "product": { "name": "vers:unknown/v2.6.0", "product_id": "CSAFPID-3629662" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.0", "product": { "name": "vers:unknown/v2.7.0", "product_id": "CSAFPID-3629663" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.1", "product": { "name": "vers:unknown/v2.7.1", "product_id": "CSAFPID-3629664" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.2", "product": { "name": "vers:unknown/v2.7.2", "product_id": "CSAFPID-3629665" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.0", "product": { "name": "vers:unknown/v2.8.0", "product_id": "CSAFPID-3629666" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.1", "product": { "name": "vers:unknown/v2.8.1", "product_id": "CSAFPID-3629667" } }, { "category": "product_version_range", "name": "vers:unknown/v2.9.0", "product": { "name": "vers:unknown/v2.9.0", "product_id": "CSAFPID-3629668" } } ], "category": "product_name", "name": "audiobookshelf" } ], "category": "vendor", "name": "advplyr" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<2.32.0", "product": { "name": "vers:unknown/<2.32.0", "product_id": "CSAFPID-5735729", "product_identification_helper": { "cpe": "cpe:2.3:a:audiobookshelf:audiobookshelf:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "audiobookshelf" } ], "category": "vendor", "name": "audiobookshelf" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27963", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges can execute code in victim users' browsers, potentially leading to session hijacking and data exfiltration. Version 2.32.0 contains a patch for the issue.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27963" }, { "category": "description", "text": "Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges can execute code in victim users' browsers, potentially leading to session hijacking and data exfiltration. Version 2.32.0 contains a patch for the issue.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27963" }, { "category": "description", "text": "Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges can execute code in victim users' browsers, potentially leading to session hijacking and data exfiltration. Version 2.32.0 contains a patch for the issue.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27963.json?alt=media" }, { "category": "other", "text": "0.0004", "title": "EPSS" }, { "category": "other", "text": "3.9", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Cveprojectv5", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "There is exploit data available from source Nvd, Is related to (a version of) an uncommon product, Is related to an uncommon product vendor", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5724969", "CSAFPID-5735729", "CSAFPID-3629563", "CSAFPID-3629564", "CSAFPID-3629565", "CSAFPID-3629566", "CSAFPID-3629567", "CSAFPID-3629568", "CSAFPID-3629569", "CSAFPID-3629570", "CSAFPID-3629571", "CSAFPID-3629572", "CSAFPID-3629573", "CSAFPID-3629574", "CSAFPID-3629575", "CSAFPID-3629576", "CSAFPID-3629577", "CSAFPID-3629578", "CSAFPID-3629579", "CSAFPID-3629580", "CSAFPID-3629581", "CSAFPID-3629582", "CSAFPID-3629583", "CSAFPID-3629584", "CSAFPID-3629585", "CSAFPID-3629586", "CSAFPID-3629587", "CSAFPID-3629588", "CSAFPID-3629589", "CSAFPID-3629590", "CSAFPID-3629591", "CSAFPID-3629592", "CSAFPID-3629593", "CSAFPID-3629594", "CSAFPID-3629595", "CSAFPID-3629596", "CSAFPID-3629597", "CSAFPID-3629598", "CSAFPID-3629599", "CSAFPID-3629600", "CSAFPID-3629601", "CSAFPID-3629602", "CSAFPID-3629603", "CSAFPID-3629604", "CSAFPID-3629605", "CSAFPID-3629606", "CSAFPID-3629607", "CSAFPID-3629608", "CSAFPID-3629609", "CSAFPID-3629610", "CSAFPID-3629611", "CSAFPID-3629612", "CSAFPID-3629613", "CSAFPID-3629614", "CSAFPID-3629615", "CSAFPID-3629616", "CSAFPID-3629617", "CSAFPID-3629618", "CSAFPID-3629619", "CSAFPID-3629620", "CSAFPID-3629621", "CSAFPID-3629622", "CSAFPID-3629623", "CSAFPID-3629624", "CSAFPID-3629625", "CSAFPID-3629626", "CSAFPID-3629627", "CSAFPID-3629628", "CSAFPID-3629629", "CSAFPID-3629630", "CSAFPID-3629631", "CSAFPID-3629632", "CSAFPID-3629633", "CSAFPID-3629634", "CSAFPID-3629635", "CSAFPID-3629636", "CSAFPID-3629637", "CSAFPID-3629638", "CSAFPID-3629639", "CSAFPID-3629640", "CSAFPID-3629641", "CSAFPID-3629642", "CSAFPID-3629643", "CSAFPID-3629644", "CSAFPID-3629645", "CSAFPID-3629646", "CSAFPID-3629647", "CSAFPID-3629648", "CSAFPID-3629649", "CSAFPID-3629650", "CSAFPID-3629651", "CSAFPID-3629652", "CSAFPID-3629653", "CSAFPID-3629654", "CSAFPID-3629655", "CSAFPID-3629656", "CSAFPID-3629657", "CSAFPID-3629658", "CSAFPID-3629659", "CSAFPID-3629660", "CSAFPID-3629661", "CSAFPID-3629662", "CSAFPID-3629663", "CSAFPID-3629664", "CSAFPID-3629665", "CSAFPID-3629666", "CSAFPID-3629667", "CSAFPID-3629668", "CSAFPID-3676742", "CSAFPID-3676743", "CSAFPID-3676744", "CSAFPID-3676745", "CSAFPID-3676746", "CSAFPID-3676747", "CSAFPID-3676748", "CSAFPID-3676749", "CSAFPID-3676750", "CSAFPID-3676751", "CSAFPID-3676752", "CSAFPID-3676753", "CSAFPID-3676754", "CSAFPID-3676755", "CSAFPID-3676756", "CSAFPID-3676757", "CSAFPID-3676758", "CSAFPID-3676759", "CSAFPID-3676760", "CSAFPID-3676761", "CSAFPID-3676762", "CSAFPID-3676763", "CSAFPID-3676764", "CSAFPID-3676765", "CSAFPID-3676766", "CSAFPID-3676767", "CSAFPID-3676768", "CSAFPID-3676769", "CSAFPID-3676770", "CSAFPID-3676771", "CSAFPID-3676772", "CSAFPID-3676773", "CSAFPID-3676774", "CSAFPID-3676775", "CSAFPID-3676776", "CSAFPID-3726157", "CSAFPID-3726158", "CSAFPID-3726159", "CSAFPID-3726160", "CSAFPID-3726161", "CSAFPID-3726162", "CSAFPID-3726163", "CSAFPID-3726164", "CSAFPID-3726165", "CSAFPID-3726166", "CSAFPID-3726167", "CSAFPID-5749538", "CSAFPID-5749539", "CSAFPID-5749540", "CSAFPID-5749541" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27963" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27963" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27963" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27963.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27963" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27963.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/advplyr/audiobookshelf/commit/503f4611b221a5bde19024e657021670df204478" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-69cp-m725-wf78" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27963.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27963" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-3629563", "CSAFPID-3629564", "CSAFPID-3629565", "CSAFPID-3629566", "CSAFPID-3629567", "CSAFPID-3629568", "CSAFPID-3629569", "CSAFPID-3629570", "CSAFPID-3629571", "CSAFPID-3629572", "CSAFPID-3629573", "CSAFPID-3629574", "CSAFPID-3629575", "CSAFPID-3629576", "CSAFPID-3629577", "CSAFPID-3629578", "CSAFPID-3629579", "CSAFPID-3629580", "CSAFPID-3629581", "CSAFPID-3629582", "CSAFPID-3629583", "CSAFPID-3629584", "CSAFPID-3629585", "CSAFPID-3629586", "CSAFPID-3629587", "CSAFPID-3629588", "CSAFPID-3629589", "CSAFPID-3629590", "CSAFPID-3629591", "CSAFPID-3629592", "CSAFPID-3629593", "CSAFPID-3629594", "CSAFPID-3629595", "CSAFPID-3629596", "CSAFPID-3629597", "CSAFPID-3629598", "CSAFPID-3629599", "CSAFPID-3629600", "CSAFPID-3629601", "CSAFPID-3629602", "CSAFPID-3629603", "CSAFPID-3629604", "CSAFPID-3629605", "CSAFPID-3629606", "CSAFPID-3629607", "CSAFPID-3629608", "CSAFPID-3629609", "CSAFPID-3629610", "CSAFPID-3629611", "CSAFPID-3629612", "CSAFPID-3629613", "CSAFPID-3629614", "CSAFPID-3629615", "CSAFPID-3629616", "CSAFPID-3629617", "CSAFPID-3629618", "CSAFPID-3629619", "CSAFPID-3629620", "CSAFPID-3629621", "CSAFPID-3629622", "CSAFPID-3629623", "CSAFPID-3629624", "CSAFPID-3629625", "CSAFPID-3629626", "CSAFPID-3629627", "CSAFPID-3629628", "CSAFPID-3629629", "CSAFPID-3629630", "CSAFPID-3629631", "CSAFPID-3629632", "CSAFPID-3629633", "CSAFPID-3629634", "CSAFPID-3629635", "CSAFPID-3629636", "CSAFPID-3629637", "CSAFPID-3629638", "CSAFPID-3629639", "CSAFPID-3629640", "CSAFPID-3629641", "CSAFPID-3629642", "CSAFPID-3629643", "CSAFPID-3629644", "CSAFPID-3629645", "CSAFPID-3629646", "CSAFPID-3629647", "CSAFPID-3629648", "CSAFPID-3629649", "CSAFPID-3629650", "CSAFPID-3629651", "CSAFPID-3629652", "CSAFPID-3629653", "CSAFPID-3629654", "CSAFPID-3629655", "CSAFPID-3629656", "CSAFPID-3629657", "CSAFPID-3629658", "CSAFPID-3629659", "CSAFPID-3629660", "CSAFPID-3629661", "CSAFPID-3629662", "CSAFPID-3629663", "CSAFPID-3629664", "CSAFPID-3629665", "CSAFPID-3629666", "CSAFPID-3629667", "CSAFPID-3629668", "CSAFPID-3676742", "CSAFPID-3676743", "CSAFPID-3676744", "CSAFPID-3676745", "CSAFPID-3676746", "CSAFPID-3676747", "CSAFPID-3676748", "CSAFPID-3676749", "CSAFPID-3676750", "CSAFPID-3676751", "CSAFPID-3676752", "CSAFPID-3676753", "CSAFPID-3676754", "CSAFPID-3676755", "CSAFPID-3676756", "CSAFPID-3676757", "CSAFPID-3676758", "CSAFPID-3676759", "CSAFPID-3676760", "CSAFPID-3676761", "CSAFPID-3676762", "CSAFPID-3676763", "CSAFPID-3676764", "CSAFPID-3676765", "CSAFPID-3676766", "CSAFPID-3676767", "CSAFPID-3676768", "CSAFPID-3676769", "CSAFPID-3676770", "CSAFPID-3676771", "CSAFPID-3676772", "CSAFPID-3676773", "CSAFPID-3676774", "CSAFPID-3676775", "CSAFPID-3676776", "CSAFPID-3726157", "CSAFPID-3726158", "CSAFPID-3726159", "CSAFPID-3726160", "CSAFPID-3726161", "CSAFPID-3726162", "CSAFPID-3726163", "CSAFPID-3726164", "CSAFPID-3726165", "CSAFPID-3726166", "CSAFPID-3726167", "CSAFPID-5724969", "CSAFPID-5735729", "CSAFPID-5749538", "CSAFPID-5749539", "CSAFPID-5749540", "CSAFPID-5749541" ] } ], "title": "CVE-2026-27963" } ] }