Correction: an identifier said to be absent from the European exploited list is carried there as a mirror of the US listing
Every record in this file was ratified by the publisher on 2026-11-12 and is in force. The declared field gives the date the correction was first recorded.
- id
- CHQ-CORR-2026-027
- class
- CORRECTION
- subtype
- editorial
- status
- IN FORCE
- authority
- DM ratified 2026-11-12
- effective
- 2026-11-12
- published
- 2026-11-12
- title
- Correction: an identifier said to be absent from the European exploited list is carried there as a mirror of the US listing
- what was wrong
- A note of 2 November 2026 on SN-2026-10-31-01 and the draft record document of Issue No. 45 said the European vulnerability database had no entry for CVE-2026-118527.
- what is true
- The full European exploited list, read on 3 November, carries the identifier as mirrored from the US catalog, added 30 October, with no European record of its own. The latest-entries feed read the day before could not show this.
- what changed
- The note and the issue text are corrected to say the European list mirrors the US listing and holds no record of its own for the identifier.
- what did not change
- No count, rating, Outlook or Watch. The Email Edition carried no statement on the point.
- control analysis
- The claim was made from a feed that returns only the latest entries. Reading the full list is now the reconciliation method.
- found by
- CHQ, in reconciling the full European list.