{"type":"bundle","id":"bundle--5a4b84d1-9664-5011-b723-828e625e9d1d","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--88b8be95-4654-5591-9056-0669fff1559f","created":"2026-09-20T19:01:23.378Z","modified":"2026-09-20T19:01:23.378Z","name":"OpenSSL CMS decrypt writes past the unwrap buffer","description":"OpenSSL CMS decrypt unwrap heap overflow. Upgrade to the patched release.","aliases":["CVE-2026-63072"],"first_seen":"2026-08-25T00:00:00.000Z","last_seen":"2026-08-25T12:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"NVD CVE-2026-63072","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-63072-openssl-cms-decrypt-unwrap-heap-overflow"},{"source_name":"CVE Record CVE-2026-63072","url":"https://www.cve.org/CVERecord?id=CVE-2026-63072"}]}]}