# Correction to the public condition statement of SC-2026-006 (record.cybersecurityhq.com condition page): the phrase describing pre-disclosure exploitation as occurring in is a frequency claim with no denominator and is withdrawn

- **Artifact ID:** CHQ-CORR-2026-013
- **Version:** 1.0
- **Status:** IN FORCE
- **Public record:** https://record.cybersecurityhq.com/governance/chq-corr-2026-013
- **Machine-record SHA-256:** `296446dd03ff4fc85bba31d23b9ed6c596cdd61ef0912125c2957eb216c57d30`

## Complete structured record

```json
{
  "id": "CHQ-CORR-2026-013",
  "title": "Correction to the public condition statement of SC-2026-006 (record.cybersecurityhq.com condition page): the phrase describing pre-disclosure exploitation as occurring in is a frequency claim with no denominator and is withdrawn",
  "class": "CORRECTION",
  "version": "1.0",
  "effective": "2026-10-19",
  "published": "2026-10-20",
  "status": "IN FORCE",
  "status_detail": "Opened 2026-10-19; applied at the Issue 43 site sync and disclosed in the Issue 43 reliance qualifications. Ratified by publication of Issue No. 43 on 2026-10-20.",
  "rule": "Correction to the public condition statement of SC-2026-006 (record.cybersecurityhq.com condition page): the phrase describing pre-disclosure exploitation as occurring in is a frequency claim with no denominator and is withdrawn. Replacement text states the observable only: exploitation documented before the first public statement identifying the vulnerable product and versions; the counted set is an observed minimum under CHQ collection, not an estimate of prevalence. Criterion v2.0 C1 unchanged. Under CGS-10.3 and STAB clause 5 (published text never edited in place): corrected text carries this ID and date. Source: external review 2026-10-19 (reviewer read of the public page; page not fetchable by CHQ tooling).",
  "scope": null,
  "authority": "DM ratified by publication 2026-10-20"
}
```
