{"schema":"sb.node.v1","id":"sb:e/cf5f3ce214914e4106b36abb","kind":"entity","label":{"text":"cvss","locale":"en"},"identity":{"anchor":"label:en:cvss","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-08T15:58:04.276991+00:00","snapshot":"deploy 7e1a8471a23e0f1eb0285c67fee8a6f7d073739a"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":93,"separatePublishers":14,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim"},"admission":{"state":"canonical","reason":"entity graph provenance 'curated'; the node carries no promotion receipt in v1","policy":"EQ-PROMOTION (receipt not carried)"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-09-03","to":"2026-10-08","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.312: about 69% of mentions carry no typed assertion"]}},"dimensions":{"domains":["cybersecurity"],"activeDays":24,"assertions":{"military-action":26,"price-threshold":1,"launch-release":1,"utterance":1}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":6,"byKind":{"observation":6},"withheld":{"state":"withheld","count":6,"reason":"6 receipts withheld: no source link (the same rule the topic record applies)"},"items":[{"id":"sb:o/be6cd8088d644555f7b1cb6c","kind":"observation","label":"shattered.io · 2026-10-06 · GitLab AI Gateway Bug Hits CVSS 9.9, No Exploit Yet [2026]","url":"https://shattered.io/gitlab-ai-gateway-cve-2026-90970-cvss-9-9-2026/"},{"id":"sb:o/6bbc22a8e07918340a7b562e","kind":"observation","label":"shattered.io · 2026-09-27 · TeamCity Flaw CVSS 9.8: Ransomware Hits 160 Servers [2026]","url":"https://shattered.io/teamcity-cve-2026-63077-ransomware-cisa-2026/"},{"id":"sb:o/2bb6af15b632b6abf2227b4c","kind":"observation","label":"The Hacker News · 2026-09-23 · New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups","url":"https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html"},{"id":"sb:o/90e19a9c1bbad968624af5d7","kind":"observation","label":"The Hacker News · 2026-09-19 · Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation","url":"https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html"},{"id":"sb:o/1bc4c2f395fc1db6b511a781","kind":"observation","label":"The Hacker News · 2026-09-19 · Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks","url":"https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html"},{"id":"sb:o/575380219d07c23592d1bb73","kind":"observation","label":"Network World · 2026-10-08 · SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug","url":"https://www.networkworld.com/article/4232292/sonicwalls-latest-critical-flaw-indicates-a-security-pattern-not-another-one-off-bug-2.html"}],"cursor":null,"order":"newest first; we keep the 6 newest receipts for this entity. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":10,"byKind":{"co-mentioned":10},"items":[{"kind":"relation","label":"co-mentioned with cisa (53 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/374187f0a823ec024dd62a68"},{"kind":"relation","label":"co-mentioned with known exploited vulnerabilities (37 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/1b4eb1dc487eb48375cc0434"},{"kind":"relation","label":"co-mentioned with ai (36 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/8a674aa5209e6910ee05c6fc"},{"kind":"relation","label":"co-mentioned with infrastructure security agency (24 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/6899497e9b9024b927c9ed30"},{"kind":"relation","label":"co-mentioned with u.s. cybersecurity (23 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/dc97d3697e00759ff32ab25d"},{"kind":"relation","label":"co-mentioned with cisco (20 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/ca34d4b8b1696925e7c21b3d"},{"kind":"relation","label":"co-mentioned with google (19 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/1cc2e6d49229a1da37621328"},{"kind":"relation","label":"co-mentioned with cves (18 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/5b75ee0a66148ff77dc9a789"},{"kind":"relation","label":"co-mentioned with linux (18 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/19568fdeede290c3b96903bd"},{"kind":"relation","label":"co-mentioned with netscaler (16 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/03bc9669c1ba55a016ac21d8"}],"cursor":null,"order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/cf5f3ce214914e4106b36abb","mcp":"traverse {\"id\":\"sb:e/cf5f3ce214914e4106b36abb\"}","page":"/entity/cvss/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/cf5f3ce214914e4106b36abb\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/cf5f3ce214914e4106b36abb\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"cantina","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/cf5f3ce214914e4106b36abb\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"cantina","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/cf5f3ce214914e4106b36abb\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"cantina","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history (EQ-REPLAY), which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"cantina","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"cantina","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"workshop","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"docking-bay","reason":"one-time Reads are parked until the Commander decides their shape (#938)"}]}