{"id":"EM-20261112-7S1U","url":"https://cyber.eventmonitor.net/incident/EM-20261112-7S1U/critical-staggs-staggs-vulnerability-cve-2026-78287/","type":"cve","title":"Critical Staggs STAGGS Vulnerability (CVE-2026-78287)","subtitle":"CVE-2026-78287","subject":"CVE-2026-78287","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-12T06:24:21.000Z","firstSignal":"2026-11-11T11:17:21.293Z","lastSignal":"2026-11-12T06:24:21.000Z","updated":"2026-11-12T15:50:47.989Z","revision":1,"life":[{"status":"Born","at":"2026-11-12T06:24:21.000Z","why":"second independent source: C31 Vulners (new public exploits)"},{"status":"Developing","at":"2026-11-12T06:24:21.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-11T11:17:21.293Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-12T06:24:21.000Z","what":"Born: second source, C31 Vulners (new public exploits). Page EM-20261112-7S1U created."}],"stages":[{"name":"Disclosed","at":"2026-11-11T11:17:21.293Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-11T11:17:21.293Z","detail":"CVSS 10 · EPSS 0.5%"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-11T11:17:21.293Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-78287 (CVSS 10)","text":"Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78287"},{"at":"2026-11-12T06:24:21.000Z","source":"C31","sourceName":"Vulners (new public exploits)","role":"Research & News","severity":3,"title":"Public exploit: Exploit for CVE-2026-78287","text":"No description provided","url":"https://github.com/evenomn/CVE-2026-78287"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-11T11:17:21.293","score":10,"severity":"CRITICAL","desc":"Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.","product":"","seen":1794404383637},"kev":null,"epss":{"epss":0.00477,"pct":0.41709,"at":1794498647989},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}