{ "schema_version": "1.1.0", "source_title": "Abhinav Agarwal / Refute-or-Promote: CVE attribution and methodology source", "source_revision": 6, "generated_at": "2026-10-07T20:11:26.116Z", "verified_date": "2026-10-07", "source_urls": { "evidence_json": "https://abhinavagarwal07.github.io/feeds/refute-or-promote.json", "rss": "https://abhinavagarwal07.github.io/feeds/refute-or-promote.rss", "cve_record_json_array": "https://abhinavagarwal07.github.io/feeds/refute-or-promote-cve-records.json", "index": "https://abhinavagarwal07.github.io/feeds/" }, "feed_formats": { "rss": "RSS 2.0; 36 published CVE records with official publication dates and unchanged CVE Record JSON enclosures.", "cve_records": "Array of 36 unmodified official CVE Record JSON 5.2 objects, also available individually through RSS enclosures.", "evidence_json": "37 CVEs with researcher, methodology, AI systems, acknowledgment and public attribution sources.", "rss_specification_url": "https://www.rssboard.org/rss-specification", "cve_record_schema_url": "https://github.com/CVEProject/cve-schema/releases/tag/v5.2.0" }, "requested_ledger_identity": "Abhinav Agarwal / Refute-or-Promote", "researcher": { "name": "Abhinav Agarwal", "public_reports_url": "https://abhinavagarwal07.github.io/" }, "system": { "name": "Refute-or-Promote", "methodology_url": "https://arxiv.org/abs/2604.19049", "ai_systems_used": [ "Claude", "Codex" ], "workflow": "Human-guided, AI-assisted; candidate generation, adversarial refutation, empirical checks, and human review." }, "inclusion_request": "Include these CVEs under Abhinav Agarwal / Refute-or-Promote and register the linked JSON/RSS source.", "researcher_statement": { "by": "Abhinav Agarwal", "date": "2026-10-07", "methodology": "All 37 listed CVEs arose from my human-guided, AI-assisted Refute-or-Promote work.", "ai_systems_used": [ "Claude", "Codex" ] }, "provenance": { "maintained_inventory_revision": 1, "inventory_id": "urn:uuid:330e5c92-cbbe-4a81-bd5c-dad2c267e94f", "inventory_access_date": "2026-10-07", "official_record_fetch_at": "2026-10-07T18:54:09.862537+00:00", "public_attribution_verification_date": "2026-10-07", "workflow_confirmation_date": "2026-10-07" }, "counts": { "unique_cves": 37, "official_published_cve_records": 36, "direct_official_acknowledgments": 33, "cisa_advisory_level_credit": 1, "vendor_advisory_level_credit": 1, "cna_cited_public_reports": 2, "researcher_confirmed_methodology_entries": 37, "additional_public_workflow_sources": 16 }, "public_workflow_evidence": { "paper_linked_cve_ids": [ "CVE-2026-33150", "CVE-2026-33179", "CVE-2026-34183", "CVE-2026-41254" ], "rsac_methodology_linked_cve_ids": [ "CVE-2026-50003", "CVE-2026-50254", "CVE-2026-35505", "CVE-2026-52868", "CVE-2026-44628", "CVE-2026-49035", "CVE-2026-50039", "CVE-2026-50032", "CVE-2026-50103" ], "public_reporting_linked_cve_ids": [ "CVE-2026-82583", "CVE-2026-78224", "CVE-2026-82578" ] }, "cve_entries": [ { "cve_id": "CVE-2026-33150", "product": "libfuse", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Project GHSA credit", "acknowledged_role": "finder", "acknowledgment": "agabhin [finder]", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33150.json", "https://github.com/libfuse/libfuse/security/advisories/GHSA-qxv7-xrc2-qmfx", "https://github.com/libfuse/libfuse/commit/49fcd891a58f622c098e2ca67d66086f7b213836", "https://github.com/libfuse/libfuse/releases/tag/fuse-3.18.2" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://arxiv.org/html/2604.19049v1", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "Paper section 4.1 explicitly lists this CVE as a Refute-or-Promote outcome." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33150.json", "date_published": "2026-03-20T20:20:29.963Z", "date_updated": "2026-07-15T01:07:15.081Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-33150.json", "official_record_sha256": "5a0c8cc1317bd8894ee45bdfd3c1becbd8321dbd90d312c9452970a427e742d2", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-33179", "product": "libfuse", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Project GHSA credit", "acknowledged_role": "finder", "acknowledgment": "agabhin [finder]", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33179.json", "https://github.com/libfuse/libfuse/security/advisories/GHSA-x669-v3mq-r358", "https://github.com/libfuse/libfuse/commit/7beb86c09b6ec5aab14dc25256ed8a5ad18554d7", "https://github.com/libfuse/libfuse/releases/tag/fuse-3.18.2" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://arxiv.org/html/2604.19049v1", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "Paper section 4.1 explicitly lists this CVE as a Refute-or-Promote outcome." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33179.json", "date_published": "2026-03-20T20:20:09.171Z", "date_updated": "2026-03-25T13:55:45.971Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-33179.json", "official_record_sha256": "1ae1797b68b185640bb9c4306c8d903164595e665f5acdc747cf753e6ab0e8e9", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-34183", "product": "OpenSSL", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "Reporter and fix suggester", "acknowledgment": "Abhinav Agarwal", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34183.json", "https://openssl-library.org/news/secadv/20260609.txt", "https://github.com/openssl/openssl/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb", "https://github.com/openssl/openssl/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517", "https://github.com/openssl/openssl/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac", "https://github.com/openssl/openssl/commit/d2e9efbe4900a373227deb136e8665401404ffac" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://arxiv.org/html/2604.19049v1", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "Paper section 4.1 explicitly lists this CVE as a Refute-or-Promote outcome." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34183.json", "date_published": "2026-06-09T16:03:23.623Z", "date_updated": "2026-06-10T15:51:12.557Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-34183.json", "official_record_sha256": "aea137c3a2242353d9d5620125190f57eef47a1921264054ce9daa631454483c", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-41254", "product": "Little CMS", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "CNA-cited public report", "basis": "CNA references user-authored disclosure", "acknowledged_role": "Public reporter; CVE request documented", "acknowledgment": "Agarwal’s public report is cited by the CNA", "other_credited_parties": [ "zerojackyi", "Guanni Qu" ], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-41254", "https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0", "https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc", "https://www.openwall.com/lists/oss-security/2026/04/17/16", "https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq", "https://www.openwall.com/lists/oss-security/2026/04/30/8" ], "context": "The CNA cites Agarwal’s public report. Earlier upstream fixes credit zerojackyi and Guanni Qu." }, "public_reports": [ "https://www.openwall.com/lists/oss-security/2026/04/17/16", "https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/", "https://www.openwall.com/lists/oss-security/2026/04/30/8" ], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://arxiv.org/html/2604.19049v1", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "Paper section 4.1 explicitly lists this CVE as a Refute-or-Promote outcome." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-41254", "date_published": "2026-04-18T06:43:13.741Z", "date_updated": "2026-05-07T17:33:56.924Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-41254.json", "official_record_sha256": "dc5c2f188432b9a181234d2c1f9d7fe94f1cfb9fe1fa64d7eea93e7229e664d7", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-50003", "product": "DCMTK", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-50003", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50003.json", "https://github.com/DCMTK/dcmtk/releases/tag/latest", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-181-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-181-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the five DCMTK findings in ICSMA-26-181-01 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-50003", "date_published": "2026-06-30T21:27:42.468Z", "date_updated": "2026-07-01T15:39:24.236Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-50003.json", "official_record_sha256": "0bcd4473ea7c31337d7bd5ce0239d834f80cf2235a301d7ab30756748213bc3c", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-50254", "product": "DCMTK", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-50254", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50254.json", "https://github.com/DCMTK/dcmtk/releases/tag/latest", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-181-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-181-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the five DCMTK findings in ICSMA-26-181-01 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-50254", "date_published": "2026-06-30T21:14:01.154Z", "date_updated": "2026-07-01T15:40:16.809Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-50254.json", "official_record_sha256": "0bba94508c39357e30636e5aa54a8fe49c35d606c03c3b9bebc5c41759e9aec3", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-35505", "product": "DCMTK", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-35505", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35505.json", "https://github.com/DCMTK/dcmtk/releases/tag/latest", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-181-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-181-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the five DCMTK findings in ICSMA-26-181-01 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-35505", "date_published": "2026-06-30T21:09:46.797Z", "date_updated": "2026-07-01T15:40:53.801Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-35505.json", "official_record_sha256": "4b4a73cc29b9245a4f1bba9770e85ee7005bed8c217c7a8d2ece96aace241613", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-52868", "product": "DCMTK", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-52868", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/52xxx/CVE-2026-52868.json", "https://github.com/DCMTK/dcmtk/releases/tag/latest", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-181-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-181-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the five DCMTK findings in ICSMA-26-181-01 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-52868", "date_published": "2026-06-30T21:06:36.568Z", "date_updated": "2026-07-01T15:41:24.906Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-52868.json", "official_record_sha256": "f1a443f94918e65fba1bb98d7f5ee4d30621066bad5f35b0410ab88748cddd4a", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-44628", "product": "DCMTK", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-44628", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44628.json", "https://github.com/DCMTK/dcmtk/releases/tag/latest", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-181-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-181-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the five DCMTK findings in ICSMA-26-181-01 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-44628", "date_published": "2026-06-30T20:54:35.796Z", "date_updated": "2026-07-01T15:41:57.859Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-44628.json", "official_record_sha256": "b83e76c3eeab46c24352702fc8825b9a50c7fad3e454c95058399fcf8ba50428", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-49035", "product": "libIEC61850", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-49035", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49035.json", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-204-06.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the four libIEC61850 findings in ICSA-26-204-06 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-49035", "date_published": "2026-07-23T20:48:18.888Z", "date_updated": "2026-07-24T13:42:05.960Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-49035.json", "official_record_sha256": "9879d0470386f3fa3baf0f599ecd4604d50184939c18463c768f83e30546795c", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-50039", "product": "libIEC61850", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-50039", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50039.json", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-204-06.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the four libIEC61850 findings in ICSA-26-204-06 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-50039", "date_published": "2026-07-23T20:32:30.439Z", "date_updated": "2026-07-24T13:54:22.569Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-50039.json", "official_record_sha256": "d4bb7c8dcaf755a10d8343d05aed231319d5a0dad6a1b00d27548033ec5b4824", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-50032", "product": "libIEC61850", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-50032", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50032.json", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-204-06.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the four libIEC61850 findings in ICSA-26-204-06 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-50032", "date_published": "2026-07-23T20:53:36.613Z", "date_updated": "2026-07-24T13:41:13.842Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-50032.json", "official_record_sha256": "404cf1a2a324132536d5e9ce40c5d4388f239621eb4f772029b58962f1ce02f4", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-50103", "product": "libIEC61850", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-50103", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50103.json", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-204-06.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.rsaconference.com/Library/blog/ai-sped-discovery-not-delivery-the-critical-infrastructure-patch-gap", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06", "https://arxiv.org/abs/2604.19049" ], "additional_public_source_note": "RSAC’s methodology account links the four libIEC61850 findings in ICSA-26-204-06 to Refute-or-Promote; the linked CISA advisory identifies this CVE and credits Abhinav Agarwal." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-50103", "date_published": "2026-07-23T20:50:42.198Z", "date_updated": "2026-07-24T13:41:40.192Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-50103.json", "official_record_sha256": "8654520fa63d1a815425b1e1117a5639d7027e1814e8708aaae4f47ba43a1774", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-63362", "product": "open62541", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-63362", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63362.json", "https://www.o6-automation.com/contact", "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f", "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60", "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e", "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-211-08.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-63362", "date_published": "2026-07-30T22:01:48.523Z", "date_updated": "2026-07-31T15:48:40.485Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-63362.json", "official_record_sha256": "e0878f90efff3d215a82cb86cbd2a3e7f94791264b535465af5746c45cb69bb0", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-63035", "product": "open62541", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-63035", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63035.json", "https://www.o6-automation.com/contact", "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f", "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60", "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e", "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-211-08.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-63035", "date_published": "2026-07-30T21:56:04.345Z", "date_updated": "2026-07-31T15:45:48.062Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-63035.json", "official_record_sha256": "91a4c3f2ca01d04f5aae2badb96e2e713d96ce5c0232817d00ebfa56b1d50ce5", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-65423", "product": "open62541", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "Shared CNA finder credit", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [ "Asher Davila", "Malav Vyas" ], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65423.json", "https://www.o6-automation.com/contact", "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f", "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60", "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e", "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-211-08.json" ], "context": "The CVE-specific CNA credits Abhinav Agarwal, Asher Davila and Malav Vyas. Agarwal’s public article credits the integer-overflow findings to Davila and Vyas." }, "public_reports": [ "https://abhinavagarwal07.github.io/posts/open62541-pubsub-transfersubscriptions-cves/" ], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65423.json", "date_published": "2026-07-30T21:59:06.093Z", "date_updated": "2026-08-24T17:52:15.835Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-65423.json", "official_record_sha256": "328b9ae2391b40c88955577e8cbc6df60a6f9f1871f43b4354a1379929c321a7", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-63559", "product": "open62541", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified advisory-level credit", "basis": "CISA advisory-level credit", "acknowledged_role": "Advisory-level reporting acknowledgment", "acknowledgment": "Abhinav Agarwal — reported these vulnerabilities to CISA", "other_credited_parties": [ "Asher Davila", "Malav Vyas" ], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63559.json", "https://www.o6-automation.com/contact", "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f", "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60", "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e", "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-211-08.json" ], "context": "CISA advisory ICSA-26-211-08 acknowledges Abhinav Agarwal and Asher Davila. The CVE-specific CNA credits Asher Davila and Malav Vyas." }, "public_reports": [ "https://abhinavagarwal07.github.io/posts/open62541-pubsub-transfersubscriptions-cves/" ], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63559.json", "date_published": "2026-07-30T21:47:21.231Z", "date_updated": "2026-08-25T14:22:58.350Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-63559.json", "official_record_sha256": "6786a116e066beb99e75473a9495c70b645380bae03266ef81eae3ff62994f8b", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-60007", "product": "Eclipse Milo", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal (GitHub: @abhinavagarwal07)", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-60007", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60007.json", "https://github.com/eclipse-milo/milo/commit/db59fae993a3a1bc66fffc8a2796d444b40285fb", "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598", "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/183" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-60007", "date_published": "2026-08-04T11:55:41.934Z", "date_updated": "2026-08-04T15:02:43.092Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-60007.json", "official_record_sha256": "0a918712bc75f92035baa9884a2f97ac0b83b5f4b326596e5fbeafb200101d6b", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-61387", "product": "Eclipse Milo", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal (GitHub: @abhinavagarwal07)", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-61387", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61387.json", "https://github.com/eclipse-milo/milo/commit/587e35669f519b2d7f6d850a5f86ee5a76c3a2c5", "https://github.com/eclipse-milo/milo/commit/5f3f6da2a5ea80682e1da7c58f7a1870b09d2b43", "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598", "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/182" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-61387", "date_published": "2026-08-04T11:52:38.259Z", "date_updated": "2026-08-04T15:02:51.029Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-61387.json", "official_record_sha256": "8715907cb35a0ceadac2662c6e00e755173e20a2c8475ec0699960aaf3df52e2", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-63248", "product": "Eclipse Milo", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal (GitHub: @abhinavagarwal07)", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-63248", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63248.json", "https://github.com/eclipse-milo/milo/commit/a5dae1be0657d2b4fcb66e63f377c1dc36069e2a", "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598", "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/181" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-63248", "date_published": "2026-08-04T12:07:43.820Z", "date_updated": "2026-08-04T15:02:13.054Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-63248.json", "official_record_sha256": "7edb1469f248aadd72fa1aac38b2bc058888eadc85214f82e09f223f106e8817", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-58080", "product": "Eclipse Milo", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal (GitHub: @abhinavagarwal07)", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-58080", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58080.json", "https://github.com/eclipse-milo/milo/commit/d51f03e9a75f313ab41c3d68d809f4b922073f1a", "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598", "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/180" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-58080", "date_published": "2026-08-04T12:05:10.547Z", "date_updated": "2026-08-04T15:02:18.894Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-58080.json", "official_record_sha256": "b7da59e28ccc61317e20346cec9d2281aa91c397fd0eaca8fc7f58202a87c73f", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-63252", "product": "Eclipse Milo", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal (GitHub: @abhinavagarwal07)", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-63252", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63252.json", "https://security.inductiveautomation.com/", "https://github.com/eclipse-milo/milo/commit/459715793ec54b0f33367a14f94264500a0d872b", "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598", "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/179" ], "context": "The CNA names Agarwal as finder. Ignition jointly acknowledges Tim Hemingway and Agarwal across two CVEs." }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-63252", "date_published": "2026-08-04T12:03:18.647Z", "date_updated": "2026-08-04T15:02:26.923Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-63252.json", "official_record_sha256": "ba6d788ecb13ce2c49503a4468d1054fd95f62958c23fb77a85039cba97b18b3", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-62927", "product": "Eclipse Milo", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal (GitHub: @abhinavagarwal07)", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-62927", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62927.json", "https://github.com/eclipse-milo/milo/commit/59b50bed094de0d18a130a48f3527254dc76105d", "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598", "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/178" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-62927", "date_published": "2026-08-04T11:57:59.822Z", "date_updated": "2026-08-04T15:02:34.431Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-62927.json", "official_record_sha256": "f0f5efdab7e4cc6f6089222872b67355b80462f7b37cd9897dd216ec241c291e", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-82583", "product": "Mirth Connect", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-82583", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82583.json", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-253-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-253-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.hipaajournal.com/high-severity-vulnerabilities-nextgen-healthcare-mirth-connect/" ], "additional_public_source_note": "HIPAA Journal (10 September 2026) links these three Mirth CVEs to Agarwal’s use of AI agents running his published AI-assisted discovery methodology." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-82583", "date_published": "2026-09-11T14:17:24.471Z", "date_updated": "2026-09-11T14:57:02.545Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-82583.json", "official_record_sha256": "33e0607ac8658c4ac0a7a635bc34893b511ea0ed37a37dc2451cab696e80d0e7", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-78224", "product": "Mirth Connect", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "CNA finder; independent rediscoverer", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [ "Youngdu (prior report per user’s published account)", "Satish Singh (prior public source-review issue)" ], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78224.json", "https://github.com/nextgenhealthcare/connect/issues/6527", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-253-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-253-01.json" ], "context": "Independent rediscovery: Youngdu reported on 24 February 2026; Agarwal reported on 10 July 2026. The CNA credits Agarwal as finder." }, "public_reports": [ "https://abhinavagarwal07.github.io/posts/nextgen-mirth-connect-sqli-xxe/" ], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.hipaajournal.com/high-severity-vulnerabilities-nextgen-healthcare-mirth-connect/" ], "additional_public_source_note": "HIPAA Journal (10 September 2026) links these three Mirth CVEs to Agarwal’s use of AI agents running his published AI-assisted discovery methodology." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78224.json", "date_published": "2026-09-11T14:20:06.708Z", "date_updated": "2026-09-11T14:57:02.383Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-78224.json", "official_record_sha256": "375fa979ac82d0a2b8886787aa5d29252abb9efdfbccbf51bb833a0c70bffa8c", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-82578", "product": "Mirth Connect", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal reported this vulnerability to CISA.", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82578.json", "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01", "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-253-01.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsma-26-253-01.json" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [ "https://www.hipaajournal.com/high-severity-vulnerabilities-nextgen-healthcare-mirth-connect/" ], "additional_public_source_note": "HIPAA Journal (10 September 2026) links these three Mirth CVEs to Agarwal’s use of AI agents running his published AI-assisted discovery methodology." }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82578.json", "date_published": "2026-09-11T14:22:29.454Z", "date_updated": "2026-09-11T14:57:02.218Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-82578.json", "official_record_sha256": "5abf75ce17cf23f2e2a58d02938dddff756cd9b5f333d1696543b1d21a6e8edb", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-47187", "product": "SSHFS", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Project GHSA credit", "acknowledged_role": "reporter", "acknowledgment": "abhinavagarwal07 [reporter]", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/47xxx/CVE-2026-47187.json", "https://github.com/libfuse/sshfs/security/advisories/GHSA-pjv6-2c3f-r357", "https://github.com/libfuse/sshfs/pull/361", "https://github.com/libfuse/sshfs/commit/bcd132f17ccf1b8592a229df797c9b08883fec26", "https://github.com/libfuse/sshfs/releases/tag/sshfs-3.7.6" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/47xxx/CVE-2026-47187.json", "date_published": "2026-08-19T14:41:57.512Z", "date_updated": "2026-08-20T18:29:10.307Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-47187.json", "official_record_sha256": "6c01fc788c5ee619d80f4858323383f3fad755bafbb2845b1ecf1976c88db9ce", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-48711", "product": "SSHFS", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Project GHSA credit", "acknowledged_role": "reporter", "acknowledgment": "abhinavagarwal07 [reporter]", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48711.json", "https://github.com/libfuse/sshfs/security/advisories/GHSA-mm85-q63v-4476", "https://github.com/libfuse/sshfs/pull/362", "https://github.com/libfuse/sshfs/commit/29bb565ea6405e2dd5a0ea65fe64da117e76055e", "https://github.com/libfuse/sshfs/releases/tag/sshfs-3.7.6" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48711.json", "date_published": "2026-08-19T14:42:50.094Z", "date_updated": "2026-08-20T18:28:58.771Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-48711.json", "official_record_sha256": "fce3cae37e679950bd6cf9c8190c464441e16cddd860a0e6ee9320670ab1b69b", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-54875", "product": "OpenSSL", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "Independently credited reporter", "acknowledgment": "Abhinav Agarwal", "other_credited_parties": [ "Feng Xue" ], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54875.json", "https://openssl-library.org/news/secadv/20260929.txt", "https://github.com/openssl/openssl/commit/9794ed473764839275cb701b4850f3c24d929c28", "https://github.com/openssl/openssl/commit/dddad955d5ff3e9507619cf4e0f13e9988e2197c", "https://github.com/openssl/openssl/commit/469f3e42629f4a0b5631796e20c66c92c138a3e8", "https://github.com/openssl/openssl/commit/3f01bbc28f7e08211fcdc797fd43816504f94257" ], "context": "Agarwal reported on 2 May 2026; Feng Xue independently reported on 6 June 2026." }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54875.json", "date_published": "2026-09-29T15:32:17.206Z", "date_updated": "2026-09-29T17:17:20.483Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-54875.json", "official_record_sha256": "a8805155a008bc7aa95219d4cfd497f67eb10e8d81ffbd4fe72f9800ddfffae6", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-58374", "product": "hostapd", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Vendor finding-specific credit", "acknowledged_role": "Independent finder and reporter", "acknowledgment": "Sebastián Alba Vives (@Sebasteuo / 0xS4bb1) and independent discovery and report by Abhinav Agarwal", "other_credited_parties": [ "Sebastián Alba Vives" ], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58374.json", "https://w1.fi/security/2026-1/missing-ml-parsing-validation.txt", "https://w1.fi/security/2026-1/", "https://git.w1.fi/cgit/hostap/commit/?id=46dd5a4ffc9bcf44cf8fc45120b3e1e5ec922187", "https://git.w1.fi/cgit/hostap/commit/?id=aa9d345887389a251c63a3781d2ad2940d079193", "https://www.openwall.com/lists/oss-security/2026/06/30/1" ], "context": "Independent discovery with shared public credit for the AP-mode link-ID validation finding." }, "public_reports": [ "https://www.openwall.com/lists/oss-security/2026/06/30/1" ], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58374.json", "date_published": "2026-06-30T12:35:54.440Z", "date_updated": "2026-06-30T13:38:26.434Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-58374.json", "official_record_sha256": "b267bf00749a21263ae6337c37330b43659f0d8c01dbaaa500579a1335e8b830", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-42798", "product": "Little CMS", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "CNA-cited public report", "basis": "CNA references user-authored disclosure", "acknowledged_role": "Public reporter; CVE request documented", "acknowledgment": "Agarwal’s public report is cited by the CNA", "other_credited_parties": [ "zerojackyi" ], "source_urls": [ "https://cveawg.mitre.org/api/cve/CVE-2026-42798", "https://github.com/mm2/Little-CMS/commit/6a686019825a89b715d16671f18d049523354176", "https://github.com/mm2/Little-CMS/compare/lcms2.18...lcms2.19", "https://www.openwall.com/lists/oss-security/2026/04/30/8" ], "context": "The CNA cites Agarwal’s public report. The earlier upstream fix credits zerojackyi." }, "public_reports": [ "https://www.openwall.com/lists/oss-security/2026/04/30/8" ], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://cveawg.mitre.org/api/cve/CVE-2026-42798", "date_published": "2026-04-30T06:34:13.323Z", "date_updated": "2026-04-30T12:57:14.221Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-42798.json", "official_record_sha256": "3ae646488d113706c8e116edd829707c39e954f11e62553864b7d2caa8c59853", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-81861", "product": "SCADAPack x70", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CISA per-CVE acknowledgment", "acknowledged_role": "reporter", "acknowledgment": "Abhinav Agarwal", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81861.json", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-258-04.json", "https://download.se.com/files?p_Doc_Ref=SEVD-2026-251-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-03.pdf", "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-251-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2026-251-03.json" ], "context": "The vendor bulletin and CISA advisory cover the same CVE." }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81861.json", "date_published": "2026-09-11T15:07:48.927Z", "date_updated": "2026-09-11T19:14:04.959Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-81861.json", "official_record_sha256": "c8dd525468dbb07fb265e72e7429ab7db8c9fc51670020de758287fb313da6c1", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-102508", "product": "Apache PLC4X", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102508.json", "https://lists.apache.org/thread.html/o076mcnsx6wnqpdy780m7s6hddbbnjfw" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102508.json", "date_published": "2026-09-30T07:42:43.537Z", "date_updated": "2026-09-30T14:39:33.687Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-102508.json", "official_record_sha256": "fdf6429fc04658ff9136616b206315e791921a22cd9eddf9f1acb3a1e94b3142", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-102509", "product": "Apache PLC4X", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "CVE-specific CNA credit", "acknowledged_role": "finder", "acknowledgment": "Abhinav Agarwal", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102509.json", "https://lists.apache.org/thread.html/qngc85qhnlj7kpk3z58z0xlxhz2tn6gp" ] }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102509.json", "date_published": "2026-09-30T08:00:27.709Z", "date_updated": "2026-09-30T14:40:06.881Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-102509.json", "official_record_sha256": "5374d4690c3f581c2378da1fcb19e9e2b71171feee8c593dc5a4a06c216eec03", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-15952", "product": "ABB PCM600", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Vendor advisory, single CVE", "acknowledged_role": "Finder and reporter", "acknowledgment": "Abhinav Agarwal — identifying this vulnerability and reporting it in a professional manner.", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15952.json", "https://psirt.abb.com/csaf/2026/2nga003170.json", "https://search.abb.com/library/Download.aspx?DocumentID=2NGA003170&LanguageCode=en&DocumentPartId=pdf&Action=Launch", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-274-03.json" ], "context": "ABB credits Agarwal’s identification and reporting in a single-CVE advisory." }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15952.json", "date_published": "2026-09-28T13:10:28.374Z", "date_updated": "2026-09-28T17:59:28.712Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-15952.json", "official_record_sha256": "507378d409f109c09a6aa5ab90397615b75abfc2f1294d0d87ed4a183bf8a1a2", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-15953", "product": "ABB PCM600", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified direct credit", "basis": "Vendor advisory, single CVE", "acknowledged_role": "Finder and reporter", "acknowledgment": "Abhinav Agarwal — identifying this vulnerability and reporting it in a professional manner", "other_credited_parties": [], "source_urls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15953.json", "https://psirt.abb.com/csaf/2026/2nga003179.json", "https://search.abb.com/library/Download.aspx?DocumentID=2NGA003179&LanguageCode=en&DocumentPartId=pdf&Action=Launch", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-274-03.json" ], "context": "ABB credits Agarwal’s identification and reporting in a single-CVE advisory." }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "cna_publication": { "state": "PUBLISHED", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15953.json", "date_published": "2026-09-28T13:17:46.752Z", "date_updated": "2026-09-28T16:32:28.788Z", "data_version": "5.2", "official_record_json_url": "https://abhinavagarwal07.github.io/feeds/cve-records/CVE-2026-15953.json", "official_record_sha256": "dec55350f22849b3684cb9270529bdae347bb515c468dbe90a1d28f164e18687", "verified_date": "2026-10-07" } }, { "cve_id": "CVE-2026-92817", "product": "Inductive Automation Ignition", "researcher": "Abhinav Agarwal", "human_attribution": { "category": "Verified vendor advisory-level credit", "basis": "Vendor advisory-level credit", "acknowledged_role": "Joint bulletin reporting acknowledgment", "acknowledgment": "Inductive Automation thanks Tim Hemingway and Abhinav Agarwal for reporting these vulnerabilities through our coordinated vulnerability disclosure program.", "other_credited_parties": [ "Tim Hemingway (joint bulletin acknowledgment)" ], "source_urls": [ "https://security.inductiveautomation.com/" ], "context": "The vendor bulletin names this CVE and jointly acknowledges Tim Hemingway and Abhinav Agarwal across two vulnerabilities." }, "public_reports": [], "ai_workflow_attribution": { "system": "Refute-or-Promote", "basis": "Researcher statement", "statement_by": "Abhinav Agarwal", "statement_date": "2026-10-07", "additional_public_source_urls": [] }, "publication_source": { "type": "Vendor advisory", "url": "https://security.inductiveautomation.com/", "verified_date": "2026-10-07" } } ] }