# Correction: an identifier said to be absent from the European exploited list is carried there as a mirror of the US listing

- **Artifact ID:** CHQ-CORR-2026-027
- **Status:** IN FORCE
- **Public record:** https://record.cybersecurityhq.com/corrections/chq-corr-2026-027
- **Machine-record SHA-256:** `b11f7a753fdd4da9b4d5eabf123a7ecc0ff8500db39c46495a145fcac013637f`

## Complete structured record

```json
{
  "id": "CHQ-CORR-2026-027",
  "class": "CORRECTION",
  "subtype": "editorial",
  "status": "IN FORCE",
  "authority": "DM ratified 2026-11-12",
  "effective": "2026-11-12",
  "published": "2026-11-12",
  "title": "Correction: an identifier said to be absent from the European exploited list is carried there as a mirror of the US listing",
  "what_was_wrong": "A note of 2 November 2026 on SN-2026-10-31-01 and the draft record document of Issue No. 45 said the European vulnerability database had no entry for CVE-2026-118527.",
  "what_is_true": "The full European exploited list, read on 3 November, carries the identifier as mirrored from the US catalog, added 30 October, with no European record of its own. The latest-entries feed read the day before could not show this.",
  "what_changed": "The note and the issue text are corrected to say the European list mirrors the US listing and holds no record of its own for the identifier.",
  "what_did_not_change": "No count, rating, Outlook or Watch. The Email Edition carried no statement on the point.",
  "control_analysis": "The claim was made from a feed that returns only the latest entries. Reading the full list is now the reconciliation method.",
  "found_by": "CHQ, in reconciling the full European list."
}
```