Publish Advisories

GHSA-8xcr-6f99-hm7w
GHSA-wg6h-5fm8-5gmj

Author: advisory-database[bot]

advisories/unreviewed/2026/03/GHSA-8xcr-6f99-hm7w/GHSA-8xcr-6f99-hm7w.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8xcr-6f99-hm7w",
+  "modified": "2026-03-25T09:31:36Z",
+  "published": "2026-03-25T09:31:36Z",
+  "aliases": [
+    "CVE-2026-3608"
+  ],
+  "details": "Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error.\nThis issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3608"
+    },
+    {
+      "type": "WEB",
+      "url": "https://downloads.isc.org/isc/kea/2.6.5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://downloads.isc.org/isc/kea/3.0.3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://kb.isc.org/docs/cve-2026-3608"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-617"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-03-25T09:16:25Z"
+  }
+}

advisories/unreviewed/2026/03/GHSA-wg6h-5fm8-5gmj/GHSA-wg6h-5fm8-5gmj.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wg6h-5fm8-5gmj",
+  "modified": "2026-03-25T09:31:36Z",
+  "published": "2026-03-25T09:31:36Z",
+  "aliases": [
+    "CVE-2026-32326"
+  ],
+  "details": "SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32326"
+    },
+    {
+      "type": "WEB",
+      "url": "https://global.sharp/corporate/info/product-security/advisory-list/2026-002"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN49524110"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-03-25T08:16:22Z"
+  }
+}