Sep 19, 2026, 6:50 AM - CISA reference
- CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C")
- CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
- CVSSv2 score source (changed from "CVE-2025-38572" to "CVE-2025-39797")
- CVSSv3 score source (changed from "CVE-2025-38500" to none)
- Exploit attributes ("Exploit available" set to "True")
- Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available")
|
Feb 9, 2026, 11:06 PM - CVSSv2 severity (based on CVE-2025-38572, severity decreased from "High" to "Medium")
- Detection (updated detection logic)
- CVSS metrics ("CVSSv2 score" set to 6.8)
- CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C")
|
Oct 16, 2025, 4:39 PM |
* Changelogs are generally available for changes made after Nov 1, 2022