{"id":409264,"recorded_at":"2026-10-27T05:52:38.941751Z","observed_at":"2026-10-27T05:52:38.941693Z","subject_kind":"source_record","subject":"x402_bazaar:https://bess-x402.onrender.com/v1/security/kev","kind":"listing","method":"sync.x402_bazaar/1","body":{"endpoints":[["x402","https://bess-x402.onrender.com/v1/security/kev"]],"name":"bess-x402.onrender.com/v1/security/kev","owner_address":"0x1129a6bb9c6165ff07fdc509c107b522ca0e1871","raw":{"accepts":[{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x1129A6BB9C6165FF07fdC509c107B522CA0e1871","scheme":"exact"},{"amount":"3000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0x1129A6BB9C6165FF07fdC509c107B522CA0e1871","scheme":"exact"},{"amount":"3000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0x1129A6BB9C6165FF07fdC509c107B522CA0e1871","scheme":"exact"}],"description":"Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search it by vendor/product: date added, remediation due date, ransomware use, CWE and required action. Use to prioritise patching.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"days":30,"limit":3},"type":"http"},"output":{"example":{"catalog_size":1756,"catalog_version":"2026.10.23","in_catalog":null,"matches":30,"source":"CISA Known Exploited Vulnerabilities catalog (CC0)","vulnerabilities":[{"added":"2026-10-23","cve":"CVE-2026-114625","cwes":["CWE-89"],"description":"Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data mana...","due":"2026-10-26","name":"Arista VeloCloud Orchestrator SQL Injection Vulnerability","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-114625","product":"VeloCloud Orchestrator","ransomware_use":"Unknown","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon...","vendor":"Arista"},{"added":"2026-10-23","cve":"CVE-2026-110447","cwes":["CWE-78"],"description":"Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.","due":"2026-10-26","name":"Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-110447","product":"Collabora Online – Built-in CODE Server","ransomware_use":"Unknown","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon...","vendor":"Collabora"}]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"properties":{"cve":{"description":"CVE id, e.g. CVE-2021-44228","type":"string"},"days":{"description":"Only entries added in the last N days","type":"integer"},"limit":{"description":"Maximum number of results (1-100)","type":"integer"},"q":{"description":"Vendor or product words, e.g. fortinet","type":"string"},"ransomware":{"description":"Only known ransomware use","type":"boolean"}},"required":[],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-27T02:58:23.649Z","quality":{"l30DaysTotalCalls":1,"l30DaysUniquePayers":1,"lastCalledAt":"2026-10-26T02:30:09.819Z"},"resource":"https://bess-x402.onrender.com/v1/security/kev","tags":["security","cve","vulnerabilities","cisa","patching"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search it by vendor/product: date added, remediation due date, ransomware use, CWE and required action. Use to prioritise patching."},"body_sha256":"cdd61b58c4cfc6cf7f7385443a97e82bf01b516a14c3d9d4ad3a46366e3e29f3","prev_id":74389,"leaf":"0x2859d06fabf4d778df08d6be1b8f9be586c85e2d94117cbb59a1a0f50680bf17","leaf_text":"{\"body\":\"cdd61b58c4cfc6cf7f7385443a97e82bf01b516a14c3d9d4ad3a46366e3e29f3\",\"id\":409264,\"kind\":\"listing\",\"method\":\"sync.x402_bazaar/1\",\"observed_us\":1793080358941693,\"prev\":74389,\"subject\":\"x402_bazaar:https://bess-x402.onrender.com/v1/security/kev\",\"subject_kind\":\"source_record\"}","day":null,"proof":[]}