{"data":{"rows":[{"cve":"CVE-2023-22894","in_kev":true,"vendor":"Strapi","product":"Strapi","name":"Strapi Cleartext Storage of Sensitive Information Vulnerability","date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve","https://github.com/strapi/strapi/releases","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2023-22894"]},{"cve":"CVE-2021-3199","in_kev":true,"vendor":"ONLYOFFICE","product":"Docs","name":"ONLYOFFICE Docs Server Path Traversal Vulnerability","date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2021-3199"]},{"cve":"CVE-2016-3081","in_kev":true,"vendor":"Apache","product":"Struts","name":"Apache Struts Command Injection Vulnerability","date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://cwiki.apache.org/confluence/display/WW/S2-032","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2016-3081"]},{"cve":"CVE-2015-5477","in_kev":true,"vendor":"ISC","product":"BIND","name":"ISC BIND Data Processing Errors Vulnerability","date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272","https://access.redhat.com/errata/RHSA-2015:1513.html","https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2015-5477"]},{"cve":"CVE-2015-3306","in_kev":true,"vendor":"ProFTPD","product":"ProFTPD","name":"ProFTPD Improper Access Control Vulnerability","date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["http://www.proftpd.org/","https://lists.debian.org/debian-security-announce/2015/msg00154.html","https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2015-3306"]},{"cve":"CVE-2026-88779","in_kev":true,"vendor":"Citrix","product":"NetScaler","name":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","date_added":"2026-10-04","due_date":"2026-10-07","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174","https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-88779"]},{"cve":"CVE-2026-102490","in_kev":true,"vendor":"Zammad GmbH","product":"Zammad","name":"Zammad GmbH Zammad Improper Privilege Management Vulnerability","date_added":"2026-10-02","due_date":"2026-10-05","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://zammad.com/en/product/releases/","https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-102490"]},{"cve":"CVE-2026-102489","in_kev":true,"vendor":"Zammad GmbH","product":"Zammad","name":"Zammad GmbH Zammad Session Fixation Vulnerability","date_added":"2026-10-02","due_date":"2026-10-05","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://zammad.com/en/product/releases/","https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-102489"]},{"cve":"CVE-2026-104286","in_kev":true,"vendor":"Fortinet","product":"FortiMail","name":"Fortinet FortiMail Path Traversal Vulnerability","date_added":"2026-10-01","due_date":"2026-10-04","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://fortiguard.fortinet.com/psirt/FG-IR-26-175","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-104286"]},{"cve":"CVE-2026-76504","in_kev":true,"vendor":"Cisco","product":"Catalyst SD-WAN Manager","name":"Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","date_added":"2026-09-30","due_date":"2026-10-03","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-76504"]},{"cve":"CVE-2026-86950","in_kev":true,"vendor":"Apple","product":"Multiple Products","name":"Apple Multiple Products Out-of-Bounds Write Vulnerability","date_added":"2026-09-29","due_date":"2026-10-13","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://support.apple.com/en-us/149226","https://support.apple.com/en-us/149228","https://support.apple.com/en-us/149229","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-86950"]},{"cve":"CVE-2026-88772","in_kev":true,"vendor":"Citrix","product":"NetScaler","name":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","date_added":"2026-09-27","due_date":"2026-09-30","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778","https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-88772"]},{"cve":"CVE-2026-88771","in_kev":true,"vendor":"Citrix","product":"NetScaler","name":"Citrix NetScaler Improper Input Validation Vulnerability","date_added":"2026-09-27","due_date":"2026-09-30","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778","https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-88772"]},{"cve":"CVE-2026-87902","in_kev":true,"vendor":"WordPress","product":"Core","name":"WordPress Core Remote File Inclusion Vulnerability","date_added":"2026-09-25","due_date":"2026-09-28","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-87902"]},{"cve":"CVE-2026-67279","in_kev":true,"vendor":"MikroTik","product":"RouterOS","name":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","date_added":"2026-09-25","due_date":"2026-09-28","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://mikrotik.com/supportsec/september-2026-vulnerability/?utm_source=chatgpt.com","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-67279"]},{"cve":"CVE-2026-65660","in_kev":true,"vendor":"Microsoft","product":"SharePoint","name":"Microsoft SharePoint Code Injection Vulnerability","date_added":"2026-09-25","due_date":"2026-09-28","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-65660"]},{"cve":"CVE-2026-71362","in_kev":true,"vendor":"Adobe","product":"Commerce and Magento","name":"Adobe Commerce and Magento Incorrect Authorization Vulnerability","date_added":"2026-09-24","due_date":"2026-09-27","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://helpx.adobe.com/security/products/magento/apsb26-92.html","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-71362"]},{"cve":"CVE-2026-5430","in_kev":true,"vendor":"WSO2","product":"Multiple Products","name":"WSO2 Multiple Products Path Traversal Vulnerability","date_added":"2026-09-24","due_date":"2026-09-27","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-5430"]},{"cve":"CVE-2026-94127","in_kev":true,"vendor":"F5","product":"BIG-IP APM","name":"F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","date_added":"2026-09-22","due_date":"2026-09-25","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://my.f5.com/manage/s/article/K000162605","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-94127"]},{"cve":"CVE-2026-93952","in_kev":true,"vendor":"Arista","product":"VeloCloud Orchestrator","name":"Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","date_added":"2026-09-22","due_date":"2026-09-25","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware":false,"notes_urls":["https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183","https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","https://nvd.nist.gov/vuln/detail/CVE-2026-93952"]}],"catalog_version":"2026.10.08","next":"GET /v1/kev/{cve} answers in_kev for any CVE (paid); GET /v1/try/kev shows that shape for CVE-2021-44228 (free)"},"meta":{"dataset":"kev","snapshot_id":"kev-20261009T183031Z-bc476d6c","as_of":"2026-10-09T18:30:31Z","retrieved_at":"2026-10-12T03:48:45.000Z","source":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","licence":"CC0-1.0","attribution":"Source: CISA Known Exploited Vulnerabilities Catalog (CC0 1.0). Not endorsed by CISA or DHS.","sha256":"bc476d6c11a365d2f4371f6775a025d2d0e3d74bed5bca521838007452b956b0","signature":"7myQFEflDakqF7g_i3K2rJVEaTHUISDTdqk1GTx5eaKfez3Vl441AmI2waBitfy0YBzE2yGUUFaRTJtVVki8BQ","key_id":"sf-2026-10","manifest_url":"/v1/kev/manifest","stale":false,"notice":"Normalised (modified) from the source. Provided as is, without warranty. Not endorsed by the source."}}