GCVE-1988-2026-0104

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "NotCVE registry index",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "NotCVE Advisories"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "----------------------------------------------------------------------------\nNotCVE Registry Index — 2026-07-16\n----------------------------------------------------------------------------\n\n[-] About the NotCVE registry:\n\nNotCVE (https://notcve.org) assigns public identifiers to real, verifiable\nvulnerabilities that did not receive a CVE — typically because the affected\nvendor did not acknowledge the issue. Each record preserves the technical\ndetails, affected products and disclosure timeline, and is never deleted: if\na CVE is assigned later, the entry keeps the original dates and cross-\nreferences it.\n\nA recent example: NotCVE-2026-0001 (Cloudflare Universal SSL CAA\naugmentation, published 2026-01-19 without a CVE) was assigned\nCVE-2026-14440 by the vendor 163 days later — which is exactly what this\nregistry is for. The original disclosure timeline is preserved. Details:\nhttps://seclists.org/fulldisclosure/2026/Jul/22\n\n[-] Current records:\n\n[2026]\n\n- Windows NTFS self-healing duplicate-name handling may allow delayed\n  reparse point exposure from crafted file system images (CVSS 6.3)\n  https://notcve.org/notcve/NotCVE-2026-0008\n- Schlage/Allegion HandPunch Missing Authentication in TCP/3001 Management\n  Protocol Allows Unauthenticated Remote Supervisor Enrollment and Data\n  Disclosure (CVSS 9.8)\n  https://notcve.org/notcve/NotCVE-2026-0007\n- Hardcoded JWT Secret in ClawVet API Allows Session Token Forgery for\n  Existing Users (CVSS 9.8)\n  https://notcve.org/notcve/NotCVE-2026-0006\n- Authenticated OS Command Injection via SSID in TP-Link TL-WR741ND V5 Web\n  Management Interface (CVSS 8)\n  https://notcve.org/notcve/NotCVE-2026-0005\n- BestCrypt Volume Encryption improper signature-based sector bypass allows\n  limited cleartext disclosure and plaintext injection (CVSS 5.7)\n  https://notcve.org/notcve/NotCVE-2026-0004\n- Deno @std/path isGlob quadratic runtime DoS prior to 1.1.2 (CVSS 5.9)\n  https://notcve.org/notcve/NotCVE-2026-0003\n- NetScaler ADC (VPX) before 14.1-60.52 missing SSH host key validation in\n  HA/HA-INC synchronization can enable adversary-in-the-middle and root code\n  execution (CVSS 7.5)\n  https://notcve.org/notcve/NotCVE-2026-0002\n- Cloudflare Universal SSL CAA augmentation may enable unauthorized DV\n  certificate issuance by weakening RFC 8657 account binding (CVSS 8.7)\n  https://notcve.org/notcve/NotCVE-2026-0001\n\n[2025]\n\n- Use of Vulnerable Go os.RemoveAll Enables Arbitrary Volume Deletion in\n  Kubernetes (CVSS 7.5)\n  https://notcve.org/notcve/NotCVE-2025-0003\n- Symlink Race in Go os.RemoveAll Allows Privileged File Deletion (CVSS 7.5)\n  https://notcve.org/notcve/NotCVE-2025-0004\n- IBM Instana /auth/SignIn returnUrl Parameter Open Redirect (CVSS 4.1)\n  https://notcve.org/notcve/NotCVE-2025-0002\n- Docker Bridge Insufficient Isolation Allows LAN Access to Unpublished\n  Ports (CVSS 6.5)\n  https://notcve.org/notcve/NotCVE-2025-0001\n\n[2024]\n\n- Linux ASLR Weakness: Improper Bit-Mask Manipulation Reducing mmap Entropy\n  by Half (CVSS 5.3)\n  https://notcve.org/notcve/NotCVE-2024-0001\n- AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5% (CVSS 5.3)\n  https://notcve.org/notcve/NotCVE-2024-0002\n\n[2023]\n\n- RSA signature verification bypass via Arbitrary Code Execution in Sansa\n  Connect bootloader (CVSS 6.2)\n  https://notcve.org/notcve/NotCVE-2023-0003\n- Buffer overflow in NVD Tools (CVSS 7.5)\n  https://notcve.org/notcve/NotCVE-2023-0002\n- Secure Boot Bypass in MSM8916/APQ8016 Mobile SoC (CVSS 7.6)\n  https://notcve.org/notcve/NotCVE-2023-0001\n\n[-] What is next:\n\nEach record will also be published individually on this list as a full\nadvisory (technical description, affected versions, timeline and\nreferences), and new NotCVE IDs will be announced here as they are assigned.\n\n[-] Requesting a NotCVE ID:\n\nIf you found a real, verifiable vulnerability and could not obtain a CVE for\nit, you can request a NotCVE identifier at https://notcve.org/form/.\nAnonymous and pseudonymous submissions are accepted. Submissions are\nreviewed before publication, and researchers are credited in the NotCVE Hall\nof Fame: https://notcve.org/hall/\n\n--\nNotCVE Advisories\nadvisories () notcve org · https://notcve.org\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives & RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-07T13:20:22Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/23"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Jul/23"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://notcve.org"
        },
        {
          "url": "https://notcve.org/form/"
        },
        {
          "url": "https://notcve.org/hall/"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2023-0001"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2023-0002"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2023-0003"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2024-0001"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2024-0002"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2025-0001"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2025-0002"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2025-0003"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2025-0004"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0001"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0002"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0003"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0004"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0005"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0006"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0007"
        },
        {
          "url": "https://notcve.org/notcve/NotCVE-2026-0008"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://seclists.org/fulldisclosure/2026/Jul/22"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Jul/23"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "NotCVE registry index — public records of vulnerabilities that shipped without a CVE",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [],
          "vulnId": "GCVE-1988-2026-0104",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/23",
            "automated": true,
            "contentSha256": "a9b82ce52f21ef65054e0601c4716a93cda0ddd4dcbdca6b108b562fb7523c47",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Jul/23",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-07-16T07:55:12Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-07T13:20:22Z",
    "dateUpdated": "2026-09-07T13:20:22Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0104"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}