{"schema":"threatline.record/2","record":{"id":"CVE-2026-115975","aliases":[],"summary":"Broken access control in JiraController","details":"Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects","categories":["Unclassified"],"product":"cervantes","vendor":"CervantesSec","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115975","source_modified_at":"2026-10-24T07:39:34.357Z","fetched_at":"2026-10-24T10:48:42.330819Z","product":"cervantes","vendor":"CervantesSec","versions":[{"lessThanOrEqual":"1.3-beta","status":"affected","version":"alpha 0.3","versionType":"custom"},{"status":"unaffected","version":"v.1.4.0-beta"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":7.1,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00288,"percentile":0.20354,"score_date":"2026-10-24"},"published_at":"2026-10-24T07:39:34.357Z","modified_at":"2026-10-24T07:39:34.357Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-115975","fetched_at":"2026-10-24T10:48:42.330819Z","source_modified_at":"2026-10-24T07:39:34.357Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115975","fetched_at":"2026-10-24T18:03:20.872036Z","source_modified_at":"2026-10-24"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.grayback.es/advisories","tags":["patch"]},{"source":"CVE List","url":"https://www.grayback.es/en/advisories","tags":["patch"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-24T07:39:34.357Z","content_hash":"7c66b439d7a078b3cdc1a1e8c305e108caf1cc7a256c207ccb232cde2181c2fc"}}