# Catch-lag breach: a vendor advisory of 14 October 2026 read ten days later, on catalog listing

- **Artifact ID:** CHQ-CATCHLAG-2026-006
- **Version:** 1.0
- **Status:** SCORED
- **Public record:** https://record.cybersecurityhq.com/governance/chq-catchlag-2026-006
- **Machine-record SHA-256:** `267b7f63f1df8e825f36098a8266239a16ee328baf275eff1bf565ff98cd3ad2`

## Complete structured record

```json
{
  "id": "CHQ-CATCHLAG-2026-006",
  "title": "Catch-lag breach: a vendor advisory of 14 October 2026 read ten days later, on catalog listing",
  "class": "COLLECTION_FINDING",
  "version": "1.0",
  "effective": "2026-10-24",
  "published": "2026-11-12",
  "status": "SCORED",
  "status_detail": "Scored 24 October 2026, in the Issue No. 44 window. Posted late: it was omitted from the Issue No. 44 export and is published with Issue No. 45.",
  "rule": "The advisory for CVE-2026-110447 (Collabora, as built into Nextcloud) was published on 14 October 2026 and reported in the press the next day. It was read on 24 October, when the catalog listed the flaw. Latency 10 days.",
  "scope": "One primary publication.",
  "authority": "DM ratified 2026-11-12"
}
```