CASCACascade Atlas

Evidence dossier

CVE-2016-3715

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Exploited in the wild (CISA KEV since Nov 3, 2021). NVD reports CVSS 3.1 5.5. EPSS estimates 75.4% exploit likelihood as of Aug 27, 2026.

81.8–82.0Priority evidence range
Evidence current through Aug 27, 2026, 6:09 PM UTC

As of Aug 27, 2026

Normalized restatement

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

State
PUBLISHED
Published
May 5, 2016
Updated
Oct 21, 2025
Evidence coverage
99%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    redhat

    Record text: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

    Inspect raw assertion
    Field
    container
    Value
    The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: ImageMagick Arbitrary File Deletion Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    ImageMagick Arbitrary File Deletion Vulnerability
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 75.38% probability · 99.48th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.753830000000; percentile 0.994770000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Nov 3, 2021 · first observed Jul 19, 2026

Exploit likelihood75.38%

FIRST EPSS · score date Aug 27, 2026 · 99.5th percentile · first observed Aug 27, 2026

SeverityCVSS 5.5

NVD · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

casca-unknown-reasons-v1
Exploitation statusEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Aug 27, 2026
Resolution
None
Exploit likelihoodEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Aug 27, 2026
Resolution
None
Severity assessmentEvidence supported

Eligible evidence is present for this bounded claim.

Revision
casca-direct-cvss-eligibility-v1
Cutoff
Aug 27, 2026
Resolution
None
Affected productsSource-reported scope

The cited source assertion is retained while canonical product linkage remains open.

Revision
casca-factor-d-obligations-v1
Cutoff
Aug 27, 2026
Resolution
Resolve identity

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
redhatOriginal assertion
Record text

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Inspect raw assertion
Field
container
Value
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

ImageMagick Arbitrary File Deletion Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
ImageMagick Arbitrary File Deletion Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

75.38% probability · 99.48th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.753830000000; percentile 0.994770000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
84Underlying assertions
30Canonical products
84Target assertions
0Constraint assertions

Grouped from 5 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

31 scope groups

redhat · source assertedn/an/aDirect source scope
Affected: n/a
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "n/a"}]
NVD CPE · OPERATING SYSTEMcanonicalubuntu_linuxVulnerable target · 4 assertions
Version 12.04; Version 14.04; Version 15.10; Version 16.04Canonical identity product-a18840e4673d48e569064752e9575849e99b3f173c63d7c965c4c193bcaebef2Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e88a537f-f4d0-46b9-9e37-965233c2a355
  2. cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    815d70a8-47d3-459c-a32c-9feaca0659d1
  3. cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7a5301bf-1402-4be0-a0f8-69fbe79bc6d6
  4. cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b6b7cad7-9d4e-4fdb-88e3-1e583210a01f
NVD CPE · APPLICATIONimagemagickimagemagickVulnerable target · 3 assertions
Any version (unconstrained) (< 6.9.3-10); Version 7.0.0-0; Version 7.0.1-0Canonical identity product-175077c3e8189059a3f0aa6ea79ee98b4b81b6e32c88dc43a6ddbd70f7e2000eLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 6.9.3-10
    Match ID
    87477201-64c5-490b-aae1-23d26f774989
  2. cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3b7ccc6b-c66e-48e2-ba1e-cbf6421b4feb
  3. cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    693c9f8f-a8c1-4d06-8f31-e085e16e701c
NVD CPE · OPERATING SYSTEMopensuseleapVulnerable target · 1 assertions
Version 42.1Canonical identity product-c27aedc6088fe47e75f3a72d532ce7dcfb4a151fd6deaeecc763cf1d10026925Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    4863be36-d16a-4d75-90d9-fd76db5b48b7
NVD CPE · OPERATING SYSTEMopensuseopensuseVulnerable target · 1 assertions
Version 13.2Canonical identity product-66ca8198d1887ac9754d1aad85d76f1edfc54c873eb2cd9bedf566863f5e07bdLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    03117df1-3bec-4b8d-ad63-dbbdb2126081
NVD CPE · OPERATING SYSTEMoraclelinuxVulnerable target · 2 assertions
Version 6; Version 7Canonical identity product-efc63d4e81383a6772c6c41b2fb3231b349512d257b4b47a2475eb5d42511849Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    44b8fedf-6cb0-46e9-9ad7-4445b001c158
  2. cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d7b037a8-72a6-4dff-94b2-d688a5f6f876
NVD CPE · OPERATING SYSTEMoraclesolarisVulnerable target · 2 assertions
Version 10; Version 11.3Canonical identity product-539219b1ee59962407ed68b1ceec26467cc69e69724392149215aa94f97bef9bLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    964b57cd-cb8a-4520-b358-1c93ec5ef2dc
  2. cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    79a602c5-61fe-47ba-9786-f045b6c6dba8
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_desktopVulnerable target · 2 assertions
Version 6.0; Version 7.0Canonical identity product-ebce605e64c58caa7df6a30e91702332cd8c0be8f801e44353e6350e913ec5aeLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    33c068a4-3780-4eab-a937-6082df847564
  2. cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ee249e1b-a1fd-4e08-aa71-a0e1f10ffe97
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_eusVulnerable target · 7 assertions
Version 6.7; Version 7.2; Version 7.3; Version 7.4; Version 7.5; Version 7.6; Version 7.7Canonical identity product-8abf8d7f0342f690712d750b6cf7fbf4068eb0134c40a51c5b57b074f81c6378Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    807c024a-f8e8-4b48-a349-4c68cd252ca1
  2. cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5bf3c7a5-9117-42c7-bea1-4aa378a582ef
  3. cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    83737173-e12e-4641-bc49-0bd84a6b29d0
  4. cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0cf73560-2f5b-4723-a8a1-9aadbb3ada00
  5. cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ae1d81a1-cd24-4b17-8afd-dc95e90ad7d0
  6. cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f96e3779-f56a-45ff-bb3d-4980527d721e
  7. cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    967ec28a-607f-48f4-ad64-5e3041c768f0
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_for_ibm_z_systemsVulnerable target · 2 assertions
Version 6.0_s390x; Version 7.0_s390xCanonical identity product-fab9230751e41d94860bfa2eaae4ca0e74c5c60f58631aa282686d100ad4fa0bLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c84eaae7-0249-4ea1-b8d3-e039b03acdc3
  2. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 10
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2148300c-ecbd-4ed5-a164-79629859dd43
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_for_ibm_z_systems_eusVulnerable target · 7 assertions
Version 6.7_s390x; Version 7.2_s390x; Version 7.3_s390x; Version 7.4_s390x; Version 7.5_s390x; Version 7.6_s390x; Version 7.7_s390xCanonical identity product-323efd260a3034fd5a801fc0892ece9f9134f88683f3fd325c7ee2fdc93956fdLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 16
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1e1db003-76b8-4d7b-a6ed-5064c3ae1c11
  2. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 14
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b908aef5-67ce-42d4-961d-c0e7adb78add
  3. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 11
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    837f0d24-99b3-4093-a45a-53adb0367fcf
  4. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 17
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ffc68d88-3cd3-4a3d-a01b-e9dbacd9b9cb
  5. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 15
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0f8eb695-5ea3-46d2-941e-d7f01ab99a48
  6. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e420b889-bb89-4b64-b0e0-7e9b8545b959
  7. cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 12
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    357fde3e-2248-4bcd-b726-97c4d92fdcb7
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_for_power_big_endianVulnerable target · 2 assertions
Version 6.0_ppc64; Version 7.0_ppc64Canonical identity product-fd0893ef7253031c8ee72effb6fcc65181f9b3f5e01f8f48b6a6ab89a31380a9Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 18
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6d8d654f-2442-4ea0-af89-6ac2cd214772
  2. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 19
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8bcf87fd-9358-42a5-9917-25df0180a5a6
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_for_power_big_endian_eusVulnerable target · 7 assertions
Version 6.7_ppc64; Version 7.2_ppc64; Version 7.3_ppc64; Version 7.4_ppc64; Version 7.5_ppc64; Version 7.6_ppc64; Version 7.7_ppc64Canonical identity product-c09e1a6c06a60f75d4f5a3a91108bcb8e8b7418b4d0bcbe56608e9eba3cd934bLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 20
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9835090f-120a-4a53-b4a8-375dd6999167
  2. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 25
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    39c1abf5-4070-4aa7-bab8-4f63e1bd91ff
  3. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 24
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    4319b943-7b19-468d-a160-5895f7f997a3
  4. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 21
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8e5b5f9e-d749-45e5-8538-7ced9620c00c
  5. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 26
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8036e2ae-4e44-4fa5-affb-a3724bfdd654
  6. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 23
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9b8b2e32-b838-4e51-baa2-764089d2a684
  7. cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 22
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    188019bf-3700-4b3f-bfa5-553b2b545b7f
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_for_power_little_endianVulnerable target · 1 assertions
Version 7.0_ppc64leCanonical identity product-d01c6ee0421fbc3321008543c2e5581950beffd4af6868b9a4ce0cf3d25d9429Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 27
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7a584aaa-a14f-4c64-8fed-675dc36f69a3
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_for_power_little_endian_eusVulnerable target · 6 assertions
Version 7.2_ppc64le; Version 7.3_ppc64le; Version 7.4_ppc64le; Version 7.5_ppc64le; Version 7.6_ppc64le; Version 7.7_ppc64leCanonical identity product-280a720ee74a48a2d9e1641fe847ee843978848900003d7939566317c7359fb5Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 33
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    418488a5-2912-406c-9337-b8e85d0c2b57
  2. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 32
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f81f859c-da89-4d1e-91d3-a000ad646203
  3. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 30
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e9a24d0c-604d-4421-afa6-5d541da2e94d
  4. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 28
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d373a806-8a25-4bd4-8511-879d8755c326
  5. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 31
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3a2e3637-b6a6-4da9-8b0a-e91f22130a45
  6. cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 29
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    cfe6c909-798b-4b7a-9bd4-6741933dbc1f
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_hpc_nodeVulnerable target · 2 assertions
Version 6.0; Version 7.0Canonical identity product-575964ce839a45cc1ce83cd932b11129384135e26d8761ae041b4e406cc13983Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 35
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3c84489b-b08c-4854-8a12-d01b6e45cf79
  2. cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 34
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c2fac325-6eeb-466d-9eba-8ed4dbc9cfbf
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_hpc_node_eusVulnerable target · 1 assertions
Version 7.2Canonical identity product-cc60d7d17f094d3155ae20d7d44f9a75b66dc9ba868985723d59b88ee100d26dLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 36
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    39a901d6-0874-46a4-92a8-5f72c7a89e85
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_serverVulnerable target · 2 assertions
Version 6.0; Version 7.0Canonical identity product-8db20157ede2f731f576213a7e555a24d2424bb17aed8e43ad9b77c3587f9deaLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 37
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9bbcd86a-e6c7-4444-9d74-f861084090f0
  2. cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 38
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    51ef4996-72f4-4fa4-814f-f5991e7a8318
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_server_ausVulnerable target · 5 assertions
Version 7.2; Version 7.3; Version 7.4; Version 7.6; Version 7.7Canonical identity product-7120df83a9b73aae2817084ac2070ecc7d1fbfcada23076a424824e660688aaeLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 40
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    98381e61-f082-4302-b51f-5648884f998b
  2. cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 42
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b353ce99-d57c-465b-aab0-73ef581127d1
  3. cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 41
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d99a687e-eae6-417e-a88e-d0082bc194cd
  4. cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 39
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1c8d871b-aea1-4407-aee3-47ec782250ff
  5. cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 43
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7431abc1-9252-419e-8cc1-311b41360078
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_server_from_rhuiVulnerable target · 2 assertions
Version 6.0; Version 7.0Canonical identity product-97a1380f0ac22d5543df434518bceb2f4b47c884bd4e990396f64e72afa98accLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 44
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0ae981d4-0ca1-46fa-8e91-e1a4d5b31383
  2. cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 45
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f732c7c9-a9cc-4def-a8be-d0f18c944c78
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_server_supplementary_eusVulnerable target · 1 assertions
Version 6.7zCanonical identity product-2db35545abcea5e5eb469295be01219c48921c14e30bb08fcfed6337333391a7Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 46
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    fe561c57-71de-434a-85bc-1faafdcc7058
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_server_tusVulnerable target · 4 assertions
Version 7.2; Version 7.3; Version 7.6; Version 7.7Canonical identity product-bc6ac9f1e87a668175a638bad6013a05d2210c8abe7977a8f8f0948257ba71daLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 50
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    17f256a9-d3b9-4c72-b013-4efd878bfea8
  2. cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 48
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    24c0f4e1-c52c-41e0-9f14-f83add5cc7ed
  3. cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 49
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b76aa310-fec7-497f-af04-c3ec1e76c4cc
  4. cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 47
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6755b6ad-0422-467b-8115-34a60b1d1a40
NVD CPE · OPERATING SYSTEMredhatenterprise_linux_workstationVulnerable target · 2 assertions
Version 6.0; Version 7.0Canonical identity product-b2aa744c9fb2b4ef0e3b842acbf37879ad4ac43af291292cfb0906170b204ab9Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 52
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    825ece2d-e232-46e0-a047-074b34db1e97
  2. cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 51
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e5ed5807-55b7-47c5-97a6-03233f4fbc3a
NVD CPE · APPLICATIONsuselinux_enterprise_debuginfoVulnerable target · 3 assertions
Version 11Canonical identity product-c114d55b1b77d823f5abd8527dc5c1d6a1fc5b140f4ff55da92296cfc7f95ca0Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f892f1b0-514c-42f7-90ae-12acdfdc1033
  2. cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d5900a25-fdd7-4900-bf7c-f3eccb714d2b
  3. cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    58d3b6fd-b474-4b09-b644-a8634a629280
NVD CPE · OPERATING SYSTEMsuselinux_enterprise_desktopVulnerable target · 2 assertions
Version 12Canonical identity product-908c58b965f5cdd7f6621821fd6c68d62c5a5ce89de01a9e91af7286e0b17d41Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3a0ba503-3f96-48da-af47-fba37a9d0c48
  2. cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d2df4815-b8cb-4ad3-b91d-2e09a8e318e9

Affected-product evidence

Accepted scope and product mapping

30 canonical links · 1 source-reported links

Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-029a01c72e5306f6a90d3f3e1d801b193443a479820fb49aa3e69e3266443cac

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
af9850f9-3b54-4eeb-9fbb-6770aeb2a4a2
Mapping establishedEvidence supported

vendor-f312a6e5551e4db2277a2caf7045c55e8d2015a199ce474d43bd1e0ce019eb0d · product-175077c3e8189059a3f0aa6ea79ee98b4b81b6e32c88dc43a6ddbd70f7e2000e

Source class
Nvd cpe vulnerable target
Assertions
3
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
1a3d9853-320e-4119-ada7-8fc80a2c09794c0cdfb9-0742-41c9-9bc4-40f55a6aac0cb67bb766-5105-4e63-b199-f2a07475b9db
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-17c7b234c758b1e03422fb7a3c0e6749e845702036e09e2074cae66121210921

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
2a3ca6b5-01a7-4f3f-9cad-54578b6f9f82
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-280a720ee74a48a2d9e1641fe847ee843978848900003d7939566317c7359fb5

Source class
Nvd cpe vulnerable target
Assertions
6
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
06e8b6a1-6d37-471b-b031-a952e2fb7d0a12ceba40-1d7d-4e61-a9c0-aef5eea7db83204a6727-d535-4cb1-be13-7271b1f3df36379c70d7-e649-492a-b056-a817b20dcf2c527ad6a4-5616-437d-8f40-c5ba543f9a7bc9bea454-3556-4813-aedb-6e7261ffbef1
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-2db35545abcea5e5eb469295be01219c48921c14e30bb08fcfed6337333391a7

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
521233c9-298c-4982-9a59-48173fae3772
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-323efd260a3034fd5a801fc0892ece9f9134f88683f3fd325c7ee2fdc93956fd

Source class
Nvd cpe vulnerable target
Assertions
7
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
14f8f377-aa21-4a41-8452-f6f74f37984b3eb6ee27-cd02-4329-9fae-b485ac157d9e659a03a4-a5cf-49e8-a65b-29e809b051d078200f53-28ca-4994-a36a-98cfaf0f7917a106799f-7e22-48bd-9e1c-6eaa8636920baf350ca8-4a02-46bc-b65a-789385530517c949bd17-ae5b-40ef-9428-c705ac44fdef
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-4f2240e45c4385f8980643ce838561b90551012dc317022ee66a7d71a9db8e28

Source class
Nvd cpe vulnerable target
Assertions
5
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
1518f2cc-eedd-44ba-9b89-9c17949a213a2944615f-ba0d-415a-954f-fbdf73f79fce34e74b8e-51be-4aee-9a81-af04a1d657e7c3cb3b8d-9967-42f6-9b28-f3dfc7db0c37da3a9493-ee21-4f2d-9085-650b27a15e4f
Mapping establishedEvidence supported

vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55 · product-539219b1ee59962407ed68b1ceec26467cc69e69724392149215aa94f97bef9b

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
b0957a7d-ca81-4433-8ad4-0c49bc73a5a3d10146ca-2bd8-4545-bda6-4889115485dd
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-575964ce839a45cc1ce83cd932b11129384135e26d8761ae041b4e406cc13983

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
56d6c264-3931-452f-8b58-520141c1fcd47c800d19-40ea-4b7f-b91d-529831e57880
Mapping establishedEvidence supported

vendor-f98e1750e4b030e2bb71130d14421ff255427227a8b696c92978cf6c77fc265d · product-66ca8198d1887ac9754d1aad85d76f1edfc54c873eb2cd9bedf566863f5e07bd

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
3d185f01-8703-44eb-9569-7afda5294dd3
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-6e046fb997f096ca9d3ba77e0e7dba3aad0205129bb30ab70c401b282bcd0f8d

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
0d1e793d-e628-400e-b500-7a57bd854e4b17a76e49-caf5-4eb3-9510-80676f5a599c
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-6fe21abd2669255eab9cb18837ddcf63aa787fce42fdad30fa2dd0c4a530da25

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
d98d1e1b-d21a-4b15-b333-91fffb7dece3
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-7120df83a9b73aae2817084ac2070ecc7d1fbfcada23076a424824e660688aae

Source class
Nvd cpe vulnerable target
Assertions
5
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
266c9b21-5e24-4a78-bc80-37c6320208243f1a9c69-9e76-4c11-88ae-1e6e05f1c87c711c70e9-1b9d-48df-b435-6725403be649ab6fa956-69e3-40b8-94d9-5a158e63f424eedafc2f-c0d5-4052-bd08-28e2887b841a
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-8abf8d7f0342f690712d750b6cf7fbf4068eb0134c40a51c5b57b074f81c6378

Source class
Nvd cpe vulnerable target
Assertions
7
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
2705d04c-b81e-4910-bda6-28d852af2cd0380838fe-6c9d-40e1-b53f-bb1a2b1e090571245477-5530-4747-987f-0bb040e37abb9c1da7f9-91a8-406b-9913-3354048dba24bdd7b671-1fd6-4497-b5f3-0d1b7c490171d20e3c17-d33f-4575-bf87-8d1100b4ad43d8c12672-92c7-465d-88f2-ce99c486940a
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-8db20157ede2f731f576213a7e555a24d2424bb17aed8e43ad9b77c3587f9dea

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
94e6e8d2-94e5-4012-8069-df786b1d381ea35c09d0-a103-4977-8240-8a3e55051e6a
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-908c58b965f5cdd7f6621821fd6c68d62c5a5ce89de01a9e91af7286e0b17d41

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
93e92fed-74de-4f2c-9296-43ccdbbe6909ef3815ac-5a42-413c-8487-c4ec3e0f8375
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-97a1380f0ac22d5543df434518bceb2f4b47c884bd4e990396f64e72afa98acc

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
659caf03-20d0-4e52-96de-f1915bb7a46e8782876e-56ba-4797-bc0a-86ad5829074d
Mapping establishedEvidence supported

vendor-c57a6167e95991f72f9616ac32b40463ac13c5f4929fcce3efc058b09a445b54 · product-a18840e4673d48e569064752e9575849e99b3f173c63d7c965c4c193bcaebef2

Source class
Nvd cpe vulnerable target
Assertions
4
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
0437c17c-e0a3-4248-bb18-2c3f5a31fd474280337f-ba0a-440d-b18d-be077e28f76f61a63759-f0a5-4e2b-a0c9-9cdb73090311a20889b8-7b76-40e1-b159-31e0eab887e3
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-b2aa744c9fb2b4ef0e3b842acbf37879ad4ac43af291292cfb0906170b204ab9

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
1bcd58e0-b489-400f-ada1-7b6ac1c0832cd226b881-a17c-43df-897b-6913aee225b6
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-bc6ac9f1e87a668175a638bad6013a05d2210c8abe7977a8f8f0948257ba71da

Source class
Nvd cpe vulnerable target
Assertions
4
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
00439523-c7af-45b3-a2d0-b8c9c65ab1dc495244ce-7689-4d33-8964-1ad3adfdc31f7c79dcad-6e53-406a-a8f2-f98b66ecfb9f8ec21087-180b-45b1-b167-278abe50f01e
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-bd4950335ff1f3f03b9dd6fa5c596f7c67c9ea6d150272de074ec3767af3532a

Source class
Nvd cpe vulnerable target
Assertions
3
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
643adf83-fefb-45a9-b5d8-0a6a190f7b5cbaaa4ef3-e3e4-4785-82f0-dec6d04c8ecbd49f5e34-c083-4962-a7f6-088b4b6dbbbd
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-c09e1a6c06a60f75d4f5a3a91108bcb8e8b7418b4d0bcbe56608e9eba3cd934b

Source class
Nvd cpe vulnerable target
Assertions
7
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
029523ee-8620-44a5-9ad8-ca3d4e7a57bd107d1f2e-ceba-4166-b1f1-6c87aa96d9f85c055cfb-a9b2-44cb-90c0-f3a60c3f836e6116b698-fb7e-4287-8204-912cb6b0610abff1ac75-28a8-4c93-879e-7c4c52e8e6eee413c5f8-4478-482a-8492-39d9dce8a7acfe77c5df-8743-41e6-a266-c3788bac9e52
Mapping establishedEvidence supported

vendor-6bbcd126779403146e957d68529786b086421e0676d9e90a4d53d03594694fb2 · product-c114d55b1b77d823f5abd8527dc5c1d6a1fc5b140f4ff55da92296cfc7f95ca0

Source class
Nvd cpe vulnerable target
Assertions
3
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
39c50178-5788-4e82-bf2e-416a548a9fcd417ff198-0324-40e0-83ea-e86c59c1e274d72e66c8-f39f-4b48-a248-625b3f240ce8
Mapping establishedEvidence supported

vendor-f98e1750e4b030e2bb71130d14421ff255427227a8b696c92978cf6c77fc265d · product-c27aedc6088fe47e75f3a72d532ce7dcfb4a151fd6deaeecc763cf1d10026925

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
a8c60bb6-ba23-4d67-9229-7b6555ecd653
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-cc60d7d17f094d3155ae20d7d44f9a75b66dc9ba868985723d59b88ee100d26d

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
acbbe96e-2fac-4a5b-9b42-411b624b2e01
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-d01c6ee0421fbc3321008543c2e5581950beffd4af6868b9a4ce0cf3d25d9429

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
3aa6d98d-b72b-4ebd-9189-c1e218b57ef4
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-ebce605e64c58caa7df6a30e91702332cd8c0be8f801e44353e6350e913ec5ae

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
1fbf0fda-9492-418c-84f7-12f172d9cf3be1ef0d69-f475-4b21-a97b-2a628ab3246f
Mapping establishedEvidence supported

vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55 · product-efc63d4e81383a6772c6c41b2fb3231b349512d257b4b47a2475eb5d42511849

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
18c32e6a-f759-42c7-bd14-b6c446b4644ac952f9e6-bb47-4626-ac41-838a0db1b6c9
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-fab9230751e41d94860bfa2eaae4ca0e74c5c60f58631aa282686d100ad4fa0b

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
96567be9-9b69-425c-a033-56f5a01bae68aea1f245-17b2-41be-8bef-7b8094244ac8
Mapping establishedEvidence supported

vendor-c759fafc60d6abc1277ecbf1ee6294d1f25ae0a4c7d5d0d9355c414b2db182cc · product-fd0893ef7253031c8ee72effb6fcc65181f9b3f5e01f8f48b6a6ab89a31380a9

Source class
Nvd cpe vulnerable target
Assertions
2
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
43f7d6c2-0779-4c6d-9f95-d4c6e91779886b9aa9dd-bfec-4d3d-965c-8a60f703b35b
Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Direct cve affected
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
62608fcd-76e7-48f3-ab1a-5d062d6d24a5

Assessments

CVSS by origin

5.5
NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
5.8
NVDCVSS 2.0 · role Primary · priority eligiblevalid_matchAV:N/AC:M/Au:N/C:N/I:P/A:P
5.5
CVE Program sourceCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
5.5
CISA-ADPCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Direct CVE/CNA normalized decisions

5.5Priority eligible

CISA-ADP

CVSS 3.1 · Secondary · Independent enrichment · rank 2

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Validation
Valid match
Recomputed
5.5
Decision reason
Evidence supported
Policy
casca-direct-cvss-eligibility-v1

Assessments are retained side by side under closed precedence. Cascade never averages CVSS.

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.