ETK-2026-852Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-852",
  "cve_id": null,
  "display_id": "ETK-2026-852",
  "ghsa_id": "GHSA-w4r8-969c-67p2",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Unauthenticated audit-chain forgery in AiSOC",
  "summary": "AiSOC through 17.0.0 can add audit records using identity and tenant claims from an unverified bearer token. An unauthenticated attacker can forge audit attribution for an existing tenant by sending requests to mutating API endpoints.",
  "mitigation": "Upgrade beenuar/AiSOC to 8f2224299124010536ff0e3ebcd9efb0149af26c (main, ships in the next release after 17.0.0) or later.",
  "vendor": "other",
  "product": "other:beenuar/AiSOC",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 17.0.0"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "8f2224299124010536ff0e3ebcd9efb0149af26c (main",
        "ships in the next release after 17.0.0)"
      ],
      "package_name": "beenuar/AiSOC",
      "purl": null
    }
  ],
  "cwes": [
    347
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 34.89603335,
  "t0_at": null,
  "signals": {
    "public_poc": {
      "at": "2026-10-07T07:04:46+00:00",
      "days": -14.272171084085649,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T13:36:41.609078+00:00",
      "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-w4r8-969c-67p2"
    },
    "trigger_signal": {
      "at": "2026-10-07T07:04:46+00:00",
      "days": -14.272171084085649,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T13:36:41.609078+00:00",
      "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-w4r8-969c-67p2"
    }
  }
}