{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:cab61eb4-dacc-4f94-b0ed-257ef7c0f9fc",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-10T07:00:35.803635+00:00",
    "tools": [
      {
        "name": "FDIE",
        "version": "1.0"
      }
    ],
    "component": {
      "type": "device",
      "name": "OpenWrt 23.05.4 armsr-armv8 rootfs",
      "bom-ref": "firmware-96"
    }
  },
  "vulnerabilities": [
    {
      "id": "CVE-2020-37127",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-37127"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2020-37127 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2023-30312",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30312"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2023-30312 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2023-42363",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42363"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2023-42363 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2023-42364",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42364"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2023-42364 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2023-42365",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42365"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2023-42365 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2023-42366",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42366"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2023-42366 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2024-51240",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51240"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2024-51240 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2024-54143",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54143"
      },
      "analysis": {
        "state": "not_affected",
        "justification": "code_not_present",
        "detail": "Not affected. CVE-2024-54143 is in openwrt/asu, the image-on-demand build server, according to its CVE record. This image is a device root filesystem: the release package manifest lists no asu package, and the server code is not in the image. FDIE matched the CVE by product name (medium confidence). Decided for the MAGDOX evidence package on 10 October 2026 by the MAGDOX engineering assistant (an AI agent), pending human review."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2024-58251",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58251"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2024-58251 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-14282",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14282"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-14282 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-46394",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46394"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-46394 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-47203",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47203"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-47203 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-57389",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-57389"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-57389 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-60876",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-60876"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-60876 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-62525",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62525"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-62525 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2025-62526",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62526"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2025-62526 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-108119",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108119"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-108119 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-12725",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12725"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-12725 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-12969",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12969"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-12969 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-26157",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26157"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-26157 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-26158",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26158"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-26158 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-26899",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26899"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-26899 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-29004",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29004"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-29004 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-30871",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30871"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-30871 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-30872",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30872"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-30872 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-30873",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30873"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-30873 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-30874",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30874"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-30874 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-46368",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46368"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-46368 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-4890",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4890"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-4890 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-4891",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4891"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-4891 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-4892",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4892"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-4892 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-4893",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4893"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-4893 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-5172",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5172"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-5172 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-55159",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55159"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-55159 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-55490",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55490"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-55490 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-59260",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59260"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-59260 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-61477",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61477"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-61477 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-62381",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62381"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-62381 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-62947",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62947"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-62947 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-62948",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62948"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-62948 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-6507",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6507"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-6507 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-66747",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66747"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-66747 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-69095",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69095"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-69095 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-69096",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69096"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-69096 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-72840",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72840"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-72840 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-72842",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72842"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-72842 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-73055",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73055"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-73055 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88830",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88830"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88830 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88831",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88831"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88831 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88832",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88832"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88832 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88835",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88835"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88835 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88837",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88837"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88837 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88839",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88839"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88839 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    },
    {
      "id": "CVE-2026-88840",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88840"
      },
      "analysis": {
        "state": "in_triage",
        "detail": "CVE-2026-88840 exploitability is under investigation."
      },
      "affects": [
        {
          "ref": "firmware-96"
        }
      ]
    }
  ]
}