data-refresh: 27462023709

[exceptd-refresh-bot]

Automated external-data refresh

New entries (auto-imported — needs human curation)

Source	ID	Note
kev	CVE-2026-35273	2026-06-12 · Oracle · PeopleSoft Enterprise PeopleTools
kev	CVE-2026-10520	2026-06-11 · Ivanti · Sentry
kev	CVE-2026-11645	2026-06-09 · Google · Chromium V8
kev	CVE-2026-7473	2026-06-09 · Arista · Extensible Operating System
kev	CVE-2026-20245	2026-06-09 · Cisco · Catalyst SD-WAN Manager
kev	CVE-2026-42271	2026-06-08 · BerriAI · LiteLLM
kev	CVE-2026-50751	2026-06-08 · Check Point · Security Gateway
kev	CVE-2026-28318	2026-06-05 · SolarWinds · Serv-U
kev	CVE-2026-45247	2026-06-03 · Mirasvit · Mirasvit Full Page Cache Warmer
kev	CVE-2022-0492	2026-06-02 · Linux · Kernel
kev	CVE-2025-48595	2026-06-02 · Android · Framework
kev	CVE-2024-21182	2026-06-01 · Oracle · WebLogic Server
kev	CVE-2026-0257	2026-05-29 · Palo Alto Networks · PAN-OS
kev	CVE-2026-8398	2026-05-27 · Daemon · Daemon Tools Lite
kev	CVE-2026-48172	2026-05-26 · LiteSpeed · cPanel Plugin
kev	CVE-2025-30400	2025-05-13 · Microsoft · Windows
kev	CVE-2025-47729	2025-05-12 · TeleMessage · TM SGNL
kev	CVE-2024-11120	2025-05-07 · GeoVision · Multiple Devices
kev	CVE-2024-6047	2025-05-07 · GeoVision · Multiple Devices
kev	CVE-2025-27363	2025-05-06 · FreeType · FreeType

Each carries an _auto_imported block with required analytical fields nulled. Curate framework_control_gaps, atlas_refs, attack_refs, type, and poc_* before merge or in a follow-up.

Updates to existing entries (500)

Source	ID	Field	Before → After
kev	CVE-2026-45321	cisa_kev	false → true
kev	CVE-2026-45321	cisa_kev_date	null → "2026-05-27"
kev	CVE-2024-21626	cisa_kev	true → false
kev	CVE-2024-3094	cisa_kev	true → false
kev	CVE-2025-14174	cisa_kev_date	"2025-12-15" → "2025-12-12"
kev	CVE-2025-24201	cisa_kev_date	"2025-03-12" → "2025-03-13"
kev	CVE-2025-1094	cisa_kev	true → false
kev	CVE-2025-14847	cisa_kev	false → true
kev	CVE-2025-14847	cisa_kev_date	null → "2025-12-29"
epss	CVE-2025-31324	epss_score	0.3151 → 0.43664
epss	CVE-2025-31324	epss_date	"2026-05-28" → "2026-06-12"
epss	CVE-2025-30154	epss_score	0.34556 → 0.44233
epss	CVE-2025-30154	epss_date	"2026-05-27" → "2026-06-12"
epss	CVE-2025-53773	epss_score	0.046 → 0.1209
epss	CVE-2025-53773	epss_date	"2026-05-13" → "2026-06-12"
epss	CVE-2026-30615	epss_score	0.14 → 0.00065
epss	CVE-2026-30615	epss_percentile	0.86 → 0.20516
epss	CVE-2026-30615	epss_date	"2026-05-11" → "2026-06-12"
epss	CVE-2026-42208	epss_score	0.37368 → 0.6259
epss	CVE-2026-42208	epss_date	"2026-05-13" → "2026-06-12"
epss	CVE-2026-43284	epss_score	0.00007 → 0.26337
epss	CVE-2026-43284	epss_percentile	0.0051 → 0.96443
epss	CVE-2026-43284	epss_date	"2026-05-13" → "2026-06-12"
epss	CVE-2026-43500	epss_score	0.0001 → 0.33658
epss	CVE-2026-43500	epss_percentile	0.0115 → 0.97063
epss	CVE-2026-43500	epss_date	"2026-05-13" → "2026-06-12"
epss	CVE-2026-45321	epss_score	0.00039 → 0.17051
epss	CVE-2026-45321	epss_percentile	0.1179 → 0.95152
epss	CVE-2026-45321	epss_date	"2026-05-13" → "2026-06-12"
epss	CVE-2024-21626	epss_score	0.65 → 0.04591

(+470 more — see refresh-report.json artifact)

Gate status

• lint-skills
• validate-indexes
• validate-cve-catalog --strict
• validate-playbooks

Structural validators only — the full tests/*.test.js suite gates the merge via required CI checks, not this PR's creation (its curation-completeness checks cannot pass on the uncurated drafts this import produces).

Each upsert bumped last_verified to today and rebuilt data/_indexes/.

🤖 Auto-generated. Human review required before merge.

[github-actions]

🎉 Skill lint finished with no errors 🎉

Check	Status
Skill lint (frontmatter + 7 body sections + cross-refs)	✅