Correction: the CVE record for a catalogued identifier was published before the Issue No. 45 artifact was attested, not after it
Every record in this file was ratified by the publisher on 2026-11-12 and is in force. The declared field gives the date the correction was first recorded.
- id
- CHQ-CORR-2026-029
- class
- CORRECTION
- subtype
- editorial
- status
- IN FORCE
- authority
- DM ratified 2026-11-12
- effective
- 2026-11-12
- published
- 2026-11-12
- title
- Correction: the CVE record for a catalogued identifier was published before the Issue No. 45 artifact was attested, not after it
- what was wrong
- A note of 4 November 2026 on SN-2026-10-31-01 said that both the CVE record and the agency's enrichment record for CVE-2026-118527 post-date the Issue No. 45 publication artifact.
- what is true
- The CVE record was published on 3 November at 14:53 UTC, thirteen minutes after CHQ's last check and 28 minutes before the artifact was attested at 15:21 UTC. Only the enrichment record, at 15:32 UTC, post-dates the attestation. Both post-date the 2 November cutoff.
- what changed
- The note keeps its original wording with the correction appended. The Issue No. 45 phrase that no record existed at every check through 3 November is accurate for the checks made and imprecise for a reader; replacement wording was drafted for the publisher.
- what did not change
- No count, rating, Outlook or Watch. The Board and the cutoff-dated finding are unaffected.
- control analysis
- The retained records carry timestamps to the second, and the note was written without reading them against the attestation time. No mechanical control compares a note's chronology with retained timestamps.
- found by
- CHQ, while drafting the next day's briefing.