← The evidence ledger
Evidence row 2202158
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://vuln-intel.x402tookit.com/kev-recent
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- a4beda06c07ea0426cec4bbddccff5e2cbba71709d58918548607b9adcba13e6
- Leaf
- 0x6615c889a03f3ce6bfa3403fc20eb23b60267f48848b58e017e9f361b9fed461
What was observed
{
"endpoints": [
[
"x402",
"https://vuln-intel.x402tookit.com/kev-recent"
]
],
"name": "Vulnerability Intelligence",
"owner_address": "0xb531320805c5bed1d46aeadcf4f008fdf172dbda",
"raw": {
"accepts": [
{
"amount": "20000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
"transactionVersions": [
0
]
},
"maxTimeoutSeconds": 300,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:137",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:42161",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
}
],
"description": "CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"days": 30
},
"type": "http"
},
"output": {
"example": {
"added": [
{
"cve": "CVE-2026-106931",
"dateAdded": "2026-10-20",
"dueDate": "2026-10-23",
"name": "EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability",
"product": "SiteGuard Server Edition",
"ransomwareUse": "Unknown",
"vendor": "EG Secure Solutions"
},
{
"cve": "CVE-2026-96656",
"dateAdded": "2026-10-20",
"dueDate": "2026-10-23",
"name": "Plex Media Server External Control of File Name or Path Vulnerability",
"product": "Media Server",
"ransomwareUse": "Unknown",
"vendor": "Plex"
}
],
"asOf": "2026-10-23T03:17:24.010Z",
"byVendor": {
"Adobe": 1,
"Ahsay": 2,
"Apache": 1,
"Apple": 1,
"Atlassian": 1,
"BeyondTrust": 1,
"Cisco": 2,
"Citrix": 3,
"EG Secure Solutions": 1,
"Fortinet": 2,
"ISC": 1,
"Ivanti": 1,
"Microsoft": 2,
"MikroTik": 1,
"ONLYOFFICE": 1,
"Palo Alto Networks": 1,
"Plex": 4,
"ProFTPD": 1,
"Siemens": 1,
"Strapi": 1,
"WSO2": 1,
"WordPress": 1,
"Zammad GmbH": 2
},
"catalogVersion": "2026.10.21",
"count": 33,
"degraded": false,
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether you run the affected products"
],
"reasons": [
"Each entry has been confirmed exploited in the wild by CISA."
],
"sinceDate": "2026-09-23",
"source": "CISA KEV catalog (CC0)",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"summary": "33 CVE(s) added to KEV since 2026-09-23; most active vendor Plex.",
"verdict": "NEW_EXPLOITED_CVES"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"days": {
"description": "Lookback days, 1 to 90, default 14",
"type": "integer"
}
},
"required": [],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"added": {
"items": {
"properties": {
"cve": {
"type": [
"null",
"string"
]
},
"dateAdded": {
"type": [
"null",
"string"
]
},
"dueDate": {
"type": [
"null",
"string"
]
},
"name": {
"type": [
"null",
"string"
]
},
"product": {
"type": [
"null",
"string"
]
},
"ransomwareUse": {
"type": [
"null",
"string"
]
},
"vendor": {
"type": [
"null",
"string"
]
}
},
"type": "object"
},
"type": [
"array",
"null"
]
},
"asOf": {
"type": [
"null",
"string"
]
},
"byVendor": {
"properties": {
"Adobe": {
"type": [
"null",
"number"
]
},
"Ahsay": {
"type": [
"null",
"number"
]
},
"Apache": {
"type": [
"null",
"number"
]
},
"Apple": {
"type": [
"null",
"number"
]
},
"Atlassian": {
"type": [
"null",
"number"
]
},
"BeyondTrust": {
"type": [
"null",
"number"
]
},
"Cisco": {
"type": [
"null",
"number"
]
},
"Citrix": {
"type": [
"null",
"number"
]
},
"EG Secure Solutions": {
"type": [
"null",
"number"
]
},
"Fortinet": {
"type": [
"null",
"number"
]
},
"ISC": {
"type": [
"null",
"number"
]
},
"Ivanti": {
"type": [
"null",
"number"
]
},
"Microsoft": {
"type": [
"null",
"number"
]
},
"MikroTik": {
"type": [
"null",
"number"
]
},
"ONLYOFFICE": {
"type": [
"null",
"number"
]
},
"Palo Alto Networks": {
"type": [
"null",
"number"
]
},
"Plex": {
"type": [
"null",
"number"
]
},
"ProFTPD": {
"type": [
"null",
"number"
]
},
"Siemens": {
"type": [
"null",
"number"
]
},
"Strapi": {
"type": [
"null",
"number"
]
},
"WSO2": {
"type": [
"null",
"number"
]
},
"WordPress": {
"type": [
"null",
"number"
]
},
"Zammad GmbH": {
"type": [
"null",
"number"
]
}
},
"type": [
"null",
"object"
]
},
"catalogVersion": {
"type": [
"null",
"string"
]
},
"count": {
"type": [
"null",
"number"
]
},
"degraded": {
"type": [
"boolean",
"null"
]
},
"disclaimer": {
"type": [
"null",
"string"
]
},
"notChecked": {
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"reasons": {
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"sinceDate": {
"type": [
"null",
"string"
]
},
"source": {
"type": [
"null",
"string"
]
},
"sourceUrl": {
"type": [
"null",
"string"
]
},
"summary": {
"type": [
"null",
"string"
]
},
"verdict": {
"type": [
"null",
"string"
]
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-11-01T22:39:43.75Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-11-01T22:39:43.594Z"
},
"resource": "https://vuln-intel.x402tookit.com/kev-recent",
"serviceName": "Vulnerability Intelligence",
"tags": [
"kev",
"cisa",
"threat-feed"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product."
}What the leaf hashes
{"body":"a4beda06c07ea0426cec4bbddccff5e2cbba71709d58918548607b9adcba13e6","id":2202158,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646813525512,"prev":null,"subject":"x402_bazaar:https://vuln-intel.x402tookit.com/kev-recent","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (444186 rows).
- 0x6615be3e5a81f05180df97370096b023d3f0f31d492cd762acadc4e635899460
- 0xe710f1d352c4310529bd16eb6a9e989fcd159e2796331b16b9bbb6ee0fbf72a6
- 0x89a24066cee7e5c3b791bacb787f44c29abbd5ee4f14035a6f02d58d010c3883
- 0x344073a63abacb3b2b535fb2dee2811f0b057ea407c3932261851feaf98ed818
- 0xb65682710b39ef870dc1a87670de7fc2ed1a03b0661f78b23bca4d6edcd62441
- 0x378bf782bd759af36c234dc5acb52653abc217d068b60d5f369221fb6ba41908
- 0x8e2c066b92bdb7cdc9b73115fde2b83842bad0bad5ef7f789d11d3bed9c31125
- 0xe3760ce6041b98a89d834b8f0eff1af3eef85001769f3d32b69ee06ddc21e8b3
- 0x2d34e03fd7cb94466694d91d4c3722d74c0f2045d830955e7b6e2c8a2b9fe799
- 0xe314e98b90ea8fd7bc739c20e04c22d24278a1c6f5e8693dbf16f44ffadf1bab
- 0x43e8664ca4268b3101d43943336d34988ce9f22f103ec12b96183d3049a78698
- 0xc896eaae3056ce1ba9baca9b17e29ba832a897624bdd998bac108458e38c2648
- 0xc1de5d78ad0d5e6c3608f4aebcde48975d4694ff02af180260cf7b52890d7af1
- 0xfb5ea8fd7d0c463ff98fdc93228854845802421c0e3865536227edf756498fcd
- 0x23f4763e8db2efe57fbc28dfc68f2b97b65f54a03425994e68157763af649a50
- 0x0e5696ae625571c52ddcd8dc09aa6c994b4ab38f2086df20d56f1f01c603e501
- 0xf9973981f80219d4f00fa9186b40a8144accc0c9875572fb79eaea312a21a187
- 0x4d205063c881c48edbbb37762a8d3bbb7444d4c42daa882f663a231893d25c35
- 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e
- Day root
- 0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1
- Chained
- 0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2
- Published
- On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af