{"id":"CVE-2026-42881","summary":"STIGQter: Arbitrary File Write leading to Local Code Execution via Export HTML","details":"STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user running STIGQter. This requires user interaction: the victim must open the malicious .stigqter file and explicitly run the \"Export HTML\" action. This vulnerability is fixed in 1.2.7.","aliases":["GHSA-mcv5-5j7p-vqh7"],"modified":"2026-08-12T16:24:24.347925Z","published":"2026-05-14T15:05:21.339Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-22","CWE-73"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42881.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42881.json"},{"type":"ADVISORY","url":"https://github.com/squinky86/STIGQter/security/advisories/GHSA-mcv5-5j7p-vqh7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42881"},{"type":"ADVISORY","url":"https://www.bitwizemusic.com/security/advisories/bve-2026-0007"},{"type":"EVIDENCE","url":"https://www.bitwizemusic.com/security/advisories/bve-2026-0007/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/squinky86/stigqter","events":[{"introduced":"0"},{"fixed":"0765aed0ec37da883fb007b7be50778b352d1700"}],"database_specific":{"extracted_events":[{"introduced":"0.1.2"},{"fixed":"1.2.7"},{"introduced":"0"}],"source":["AFFECTED_FIELD","DESCRIPTION"]}}],"versions":["1.2.6","1.2.5","1.2.4","1.2.3","1.2.2","1.2.1","1.2.0","1.1.4","1.1.3","1.1.2","1.1.1","1.1.0","1.0.2","1.0.1","1.0.0","0.1.6-beta","0.1.5-beta","0.1.4-beta","0.1.3-beta","0.1.2-beta","0.1.1-beta","0.1.0_beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42881.json","vanir_signatures_modified":"2026-08-12T16:24:24Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/main.cpp"},"deprecated":false,"digest":{"line_hashes":["117544328829018480324470943134292384584","34688463750960631718925847076188757348","83622378432500042916196519783171808077","89904756669602780455093826481448628364","47458760047631642998961343507052972755","444012059883458655646144454371640940","53032843169569788395491403312704750550","299828688443573262556725949131227393997","323745806009421545287761053304298275227","58559219534631131034881756007814129182"],"threshold":0.9},"id":"CVE-2026-42881-034f6451"},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercmrsexport.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["64677175258067300645951746073724130936","325313137818385813962551944054518500138","186912145490436953178662151700761510611","214436777698033397040062253270783077845","52883443788624716025825880506026349024","190423262449504204688971310154314551485","263662296732824006681138192893860869982","83095060744595490843657806448590734540","288444384622075960348271800745495185982","170744805600680138885254045165030336864","203866960365762504878972965900380122751","195588542557171260332921718665380595400"]},"id":"CVE-2026-42881-0a5e7f53","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercciadd.cpp","function":"WorkerCCIAdd::process"},"deprecated":false,"digest":{"function_hash":"69057964631858490239312541820539794825","length":9793},"id":"CVE-2026-42881-14cdf91e"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::DisplaySTIGs"},"deprecated":false,"digest":{"function_hash":"195513350596077774675900564520334845099","length":439},"id":"CVE-2026-42881-1693fdf1"},{"deprecated":false,"digest":{"function_hash":"202525254667598681508826636476556746488","length":306},"id":"CVE-2026-42881-22d9c22c","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigedit.cpp","function":"STIGEdit::UpdateChecks"}},{"id":"CVE-2026-42881-2b2af05a","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerstigadd.cpp","function":"WorkerSTIGAdd::ParseSTIG"},"deprecated":false,"digest":{"length":8058,"function_hash":"117386909438645249124069363866731144529"}},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerimportemasscontrol.cpp","function":"WorkerImportEMASSControl::process"},"deprecated":false,"digest":{"function_hash":"334680479979960826307436605162638939202","length":5938},"id":"CVE-2026-42881-31e46125","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["137081379680732092259774150655528991301","4164666083132280618046937583868667875","271533299491546348819821721431593441535","262196480994824130665471444569759493920"],"threshold":0.9},"id":"CVE-2026-42881-359f11e7","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerstigdelete.cpp"}},{"digest":{"function_hash":"43548700317370205820915006105043560466","length":480},"id":"CVE-2026-42881-3839d1f5","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::DeleteAsset"},"deprecated":false},{"target":{"file":"src/workerckl.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["125397236842218039942833144618124046791","235653523921140711994979566419671993216","43895010677070327582984603603375552731","29209081084489349322653909817037104540","16450316252192916778125935564235670124","320009169383104576805827528320518537553","261429509488419615703018224420610937649","96033990493333352055772307447510641784","184155893580057074010217354760961135525","286034215383274146972385135596086000627","107285150253800964051980954587575251590","153056985940396744763677819980973374888","335390956782004553511874656652031812589","99652326937859803406414473073494742357","58100565010438359685060731959673700593","201718415011839287235744122090907954712"]},"id":"CVE-2026-42881-3d17a235","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerpoamreport.cpp"},"deprecated":false,"digest":{"line_hashes":["59505996193017817436798549128042249598","277057488970637377989283786079538901893","268767992020372366131868413367675002754","308577642477514108465180629723354353839","257427219799599312793847241314534253190","86133098522795471541306672151739599638","212717331869982750082023278310408508103","282048249307677785624384446801629771402","336431048816146077097185924328105340239","148389169737406132715073274900497229214","124643734874355584082536102161385185613","289339377907062765685159433720954484963","12375506231146245523025455529353695284","95985622148462844424905653564719251747","47101131566162841825534933996211724303","292267077679348821005026508092922244036","392085368880201232690115920655806805","206701878315467925127994367431261136028","314733855077604812721021360035535524432","135605520139909522352884437870524641185","164995021107782832482141516431398371493","45874829885673157776190995539803423162","230172480461344484369698991140868497161","290884604661381878081456904676699739161","229183670945748608214916879199076794933","108914728251215189283570102230453987866","71935060713277437286605431602160561753","331903818349641050969710709367530193970","55474089430542191437289025151850254475","178424089046866261387940704035422597085","137608405565633296304351767031029369250","98683059840030816084052226197459062406","164995021107782832482141516431398371493","151538600431261455935086706416387882195","194016583754057153803033580485989123978","53470961023643826856335242000481607579","174042343433576594781181389606579610156","118988226431149396752599334859843637738","321713931059964961264620077333727143083"],"threshold":0.9},"id":"CVE-2026-42881-404abc18"},{"deprecated":false,"digest":{"function_hash":"171616680806012167289893082035921210142","length":811},"id":"CVE-2026-42881-42ea46a4","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::MapUnmapped"}},{"deprecated":false,"digest":{"function_hash":"141046471887846501720813966459675371107","length":15389},"id":"CVE-2026-42881-4526ac59","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerpoamreport.cpp","function":"WorkerPOAMReport::process"}},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerfindingsreport.cpp"},"deprecated":false,"digest":{"line_hashes":["21880282608327411462550260347485343611","201429595526953672325737533660846651133","18804273950830510053616610173585179382","174041146049660460933571147365850906373","122139634145009013871693360721520068030","114857218000839669416018451369064201621","17553297427037288747287846034062076554","47843112952806595424765572964558396034","337642122818101927960764369214155740663","177656231820370486928654096889051953150","263707479971346784686882812387101528971","133424097856166440471222785453062808338","109390254395705493237910877376550879848","185125504594337098375040470527536450123","120889685628957718788592830951961901601","141447852885130504499212331366236733009"],"threshold":0.9},"id":"CVE-2026-42881-45b1fbef","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerassetadd.cpp","function":"WorkerAssetAdd::process"},"deprecated":false,"digest":{"length":501,"function_hash":"313269626698105795574461382468129606395"},"id":"CVE-2026-42881-48368157","signature_type":"Function"},{"id":"CVE-2026-42881-54421617","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::ShowChecks"},"deprecated":false,"digest":{"function_hash":"249019539271661619779494094339173858619","length":1276}},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigedit.cpp","function":"STIGEdit::UpdateCheck"},"deprecated":false,"digest":{"function_hash":"72568466638748783954119710894507755577","length":938},"id":"CVE-2026-42881-5507ae41","signature_type":"Function"},{"digest":{"function_hash":"305687906667756259491596497396069238493","length":528},"id":"CVE-2026-42881-5832f352","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::OpenCKL"},"deprecated":false},{"target":{"file":"src/assetview.cpp","function":"AssetView::ImportXCCDF"},"deprecated":false,"digest":{"length":3375,"function_hash":"235757396323915435360509466646377036829"},"id":"CVE-2026-42881-597264ca","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"deprecated":false,"digest":{"function_hash":"201663542534499770832342668293641890053","length":1000},"id":"CVE-2026-42881-5a2ee388","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/dbmanager.cpp","function":"GetLastExecutedQuery"}},{"digest":{"function_hash":"88752097034806306534407278971576190643","length":1347},"id":"CVE-2026-42881-5d6d2737","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::UpdateCKLCheck"},"deprecated":false},{"target":{"file":"src/workercklupgrade.cpp"},"deprecated":false,"digest":{"line_hashes":["67539270990219947464976716385311884973","77138760473867284484044594336522177878","7741883107806405890670711658372332148","50158982990504266034057505588335653727","218906484797205140661275250389850681501","192343369849204955711816840083640695486","77467393517812440267815561470969935572","212483455081235975048583380722643526488","247848642259787971908587844612590922741","241070498063860519471950330053061331757","20584814750467977885124288097099655311","259442363147311404040835752264703039410"],"threshold":0.9},"id":"CVE-2026-42881-63ff64e1","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercklupgrade.cpp","function":"WorkerCKLUpgrade::process"},"deprecated":false,"digest":{"function_hash":"269296490549254189301970339468372317205","length":1258},"id":"CVE-2026-42881-6724e2e7","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercmrsexport.cpp","function":"WorkerCMRSExport::process"},"deprecated":false,"digest":{"function_hash":"271344065849187532534717725452747479225","length":4289},"id":"CVE-2026-42881-689c3d36","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"176257797044831290588798220436110870898","length":399},"id":"CVE-2026-42881-6cdd17f1","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerstigdelete.cpp","function":"WorkerSTIGDelete::process"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"210637536357776273645853129799147004038","length":1462},"id":"CVE-2026-42881-6dffa9c6","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::UpdateCKLHelper"}},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerhtml.cpp"},"deprecated":false,"digest":{"line_hashes":["265088377549668263656374579384099784695","72846431438591511854412393174173605265","218074839706554634388548619992200568924","284268600518007793214606017585242856503","92250292588241761243225600232923272756","192784281250167055472746273254581178181","199217821436502355343978355673504120935","67105881244366920506698646904959379453","207433683435332786359584895336259530386","257335894685790791885596777406389282182","57161841972813182578463020118261427468","255280229938861389727405507927002956644","267815911179436628274154991727963879545","283709083269398991830044320548705259703","165113814720152871017722412601682011279","219817430340743390753601114808268646883","20829969636737204472245152586880283136","147517698151266582042425517103465973313","158850186796365335437829101000126524644","285741066945012096003207344570551499547"],"threshold":0.9},"id":"CVE-2026-42881-71e3e299","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/dbmanager.cpp","function":"DbManager::LoadDB"},"deprecated":false,"digest":{"function_hash":"158141535418761048780646304065007239259","length":404},"id":"CVE-2026-42881-73e788e6","signature_type":"Function"},{"digest":{"function_hash":"158870732115185061883737938961811464886","length":306},"id":"CVE-2026-42881-786ba62c","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::DeleteSTIGs"},"deprecated":false},{"target":{"file":"src/workerassetadd.cpp"},"deprecated":false,"digest":{"line_hashes":["324807358381092111487290015719944027280","294598591523650473388272920753655259448","291026580450221025947728546864252296282","149438339402525818585849666333430593106"],"threshold":0.9},"id":"CVE-2026-42881-78c2f3f8","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"id":"CVE-2026-42881-7e21bf97","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::DeleteAssets"},"deprecated":false,"digest":{"function_hash":"142646317498085545351923116283196591730","length":626}},{"target":{"file":"src/workermapunmapped.cpp"},"deprecated":false,"digest":{"line_hashes":["39156758078683510493162974082151756914","215600101684451737319883270230281340956","134435778094714188705913640318551936558","75625288467458794634183027946577753518","337589809195771734637214082947560044857","66631145266923617590382227810981276983","293263489420813216609811723567006024294","40856377659656904048796648322642272109","159934451261030946336534784583302803168","230719295879357314667865752306124098081","292591359872241152090676568929406051703","293377072761437014351689267655252427900","175088293063479362815624984957615560136","239773804154200193937565745953854480925","197000143240795431281088450706628446596","254633099733509328293047612463085788072"],"threshold":0.9},"id":"CVE-2026-42881-8202da7f","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"deprecated":false,"digest":{"line_hashes":["20920972529080138333493792210700881159","57290484848813037700786054812961960631","18585878010599272333505793845939349652","80274140386506180648827022245943354332","69704545545869015186323597995047457715","74460020579963992593804993736462422839","201981337124302516538911195797619154360","80274140386506180648827022245943354332"],"threshold":0.9},"id":"CVE-2026-42881-82866157","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerimportemass.cpp"}},{"digest":{"function_hash":"151418294681828747029873883479395189953","length":494},"id":"CVE-2026-42881-84192048","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::SelectSTIGs"},"deprecated":false},{"id":"CVE-2026-42881-860b5c7a","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"function":"AssetView::UpdateSTIGCheck","file":"src/assetview.cpp"},"deprecated":false,"digest":{"function_hash":"172087233458429127261304147686418946161","length":948}},{"digest":{"function_hash":"13653245777222362744285490912179235614","length":266},"id":"CVE-2026-42881-874d91e5","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/dbmanager.cpp","function":"DbManager::GetCCIs"},"deprecated":false},{"id":"CVE-2026-42881-88e2fe4f","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::~AssetView"},"deprecated":false,"digest":{"function_hash":"284060039346091772380079577625541152334","length":134}},{"target":{"file":"src/workerassetdelete.cpp"},"deprecated":false,"digest":{"line_hashes":["314973632696593700770703929272290041896","171244779285275912894547214492158751065","242360394151433114683929466920964715445","258319569660954417095908365416712826238","289412729555528675181313863406506177600","243283504770984181849415696053730546953","156549535868253706941553335899112635073","267178728163172122817796096891413131744","170406122986379818669649350007201258142","243961618249615620289199571774976356741","271217644347721914766997388102196110798"],"threshold":0.9},"id":"CVE-2026-42881-89026b21","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"target":{"file":"src/workermapunmapped.cpp","function":"WorkerMapUnmapped::process"},"deprecated":false,"digest":{"function_hash":"137789462942505604351761270825911750244","length":923},"id":"CVE-2026-42881-890c9732","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"deprecated":false,"digest":{"function_hash":"230909236147344094227602543090381142431","length":2572},"id":"CVE-2026-42881-8acde38e","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::RunTests"}},{"deprecated":false,"digest":{"line_hashes":["103365530691028734117503781338044724059","302765815385068634457657323887808720474","167172237247937423919266205429137476744","37777798460571904680637548840104608797","322855543172833862119512597791718125659","99564550071808783212146931630500900481","44316608337354507640911811657417813373","153789583274049110717883447256431860823","177922343489182467843156986201163260262","324771221457933604927711928652170180189","221312210361566196617871551641570256997","65652963691608473100550885689990467893","334170972798184757878689417080878178171","75070099761542646923724209477030651965","76059137138436905061781238265365817718","333200114522702578742875507795869766039","102535070156691222494557207250466721527","103898669779708041024823498116479447981","90526019615505698191837641385590518889","284987248465119487689011270914189458484","5502586987008281712197590758385794903","96273499209731987065758915993422199216","273023488825676309291129156660319167968","145258940762718086219388792275364406625","96345139491770896603655910838506598903","331051009392279535783980232404128893915","244344071557448787624942870394363800653","234870963769539575995288366547883449571","38260054596271369224593523065179279617","338944841323324030974699568691855296179","80765663643168122354925905455500693178","48570487094312363991018122737757178448","41633181162954024888096983445761714507","20609921479918818828418399124480387462","334230384819841792082587907841415198409","45540676595058511648467109097450511326","132808545318709485478472813578643173479","19080898603862908374226065115160855819","213867874430431630609058875411876542657","184759950645241412060935426562292920459"],"threshold":0.9},"id":"CVE-2026-42881-8ae9428e","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp"}},{"deprecated":false,"digest":{"function_hash":"48957710496758820041509815988231865757","length":469},"id":"CVE-2026-42881-8b686b76","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/assetview.cpp","function":"AssetView::UpdateCKLStatus"}},{"id":"CVE-2026-42881-8f4776bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"function":"WorkerSTIGAdd::process","file":"src/workerstigadd.cpp"},"deprecated":false,"digest":{"function_hash":"41962426784955437915788493154280045351","length":717}},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/main.cpp","function":"main"},"deprecated":false,"digest":{"function_hash":"110414792791739418762183306372709769248","length":4660},"id":"CVE-2026-42881-9106072c","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"32270071275616275661896298429258808053","length":626},"id":"CVE-2026-42881-919537c6","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::EditSTIG"}},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigedit.cpp"},"deprecated":false,"digest":{"line_hashes":["233694084062786964194513735642170210926","127434803990721591512717967640554099773","124959963477406730659144633619341431007","21022882387775570946767781461145796888","47472055985392640559618677425066533954","266069378124272432901009185442681424160","268103474811597890342726563592706733205","243997377478572664565101810959632263248","279842686850935861014757183255634608971","172060269090571492901818483929711110850","159501219554796280981982110746576766872","157389959237620833332673765797041288032","183066163750898202487853617625950605803","284817353124095629029248855224930514060","207497644054030007500439559882649721444","187463445064839165798252736269859582160","324637540762987373048223894300754411733","39285152092782905334426168923044322148","138538183566932231788922149365935624232","132437684361055981152324027104683354930","25152739359987482144721533238237441477","254119864819240849077517683892753134165","310960968833346751022582055535121084709","44598956322085866561572290597820075965"],"threshold":0.9},"id":"CVE-2026-42881-9259b504","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/control.cpp","function":"Control::IsImport"},"deprecated":false,"digest":{"function_hash":"296681046238280072676316833484130860212","length":131},"id":"CVE-2026-42881-99a3f0cd","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"118473535734951798855363458189383239030","length":370},"id":"CVE-2026-42881-9bf5f683","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::UpdateSTIGs"}},{"deprecated":false,"digest":{"function_hash":"320349416252837234750937895322745979233","length":11543},"id":"CVE-2026-42881-9ca3bcb8","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"function":"WorkerCKL::process","file":"src/workerckl.cpp"}},{"digest":{"function_hash":"295730134670429698837354565365772349344","length":905},"id":"CVE-2026-42881-a202f28b","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerassetdelete.cpp","function":"WorkerAssetDelete::process"},"deprecated":false},{"id":"CVE-2026-42881-a364fde2","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/dbmanager.cpp","function":"DbManager::AddSTIG"},"deprecated":false,"digest":{"function_hash":"309508315459183751420042859952582442590","length":6588}},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerhtml.cpp","function":"WorkerHTML::CheckItem"},"deprecated":false,"digest":{"function_hash":"147330343355523945272453166303259875918","length":387},"id":"CVE-2026-42881-a5557cb1","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerhtml.cpp","function":"WorkerHTML::process"},"deprecated":false,"digest":{"function_hash":"108408382213245848875454010451822254073","length":12111},"id":"CVE-2026-42881-a6f150f5"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercklimport.cpp","function":"WorkerCKLImport::ParseCKL"},"deprecated":false,"digest":{"function_hash":"8375446933972874970025858979073879489","length":6247},"id":"CVE-2026-42881-ae251982"},{"deprecated":false,"digest":{"line_hashes":["78576418074265974928255588692065268981","274265445356337191400878385446891427026","201395177922740810176660457454511659734","275566147682626777819915967195210421511"],"threshold":0.9},"id":"CVE-2026-42881-b0993a40","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/common.cpp"}},{"target":{"file":"src/workercklimport.cpp"},"deprecated":false,"digest":{"line_hashes":["286717165782261405884680003019386138515","118694964490288005792673373423336078748","296456922008635841254010582337505382778","300005840837112143248141234035287323048","249686139483616350293105065435058421591","118694964490288005792673373423336078748","296456922008635841254010582337505382778","300005840837112143248141234035287323048","220062267327246942138653998246889313667","281811950526104201557053072738239077601","63878335207494101393414613842153058276","275701476530026509194713764917304428646"],"threshold":0.9},"id":"CVE-2026-42881-b5bf3a82","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"target":{"file":"src/dbmanager.cpp","function":"DbManager::DeleteSTIG"},"deprecated":false,"digest":{"function_hash":"63100879500360367210831471549219226613","length":1772},"id":"CVE-2026-42881-bcd415c9","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercciadd.cpp"},"deprecated":false,"digest":{"line_hashes":["42529719819342920934345299722821086086","75876094222167359115053630239016195698","7631210551066736582687866634700967094","130251119898528431837631024606730326444","252311618303645106077417791654900264473","154710589455769376935696490354078333254","326277953431879515871983981518889607257","113161390761343583069837587797836922742","77382642230892963956727725517440328929","153605623670045500515417491808202263592","89481887220335956954491520145280015356","67514384874373004830945481503550429656"],"threshold":0.9},"id":"CVE-2026-42881-c68ed0a4"},{"deprecated":false,"digest":{"line_hashes":["224048776191619482643671966991479159407","38943108588329292440476934708346873212","294916666999638152159209782714707014187","35041057050290031822554974955590789619","39506491778965550130715744282461016883","276292636000213375577572957457833956521","181142175590870449432774882689684331407","184495152070898022821298290832199925689","8226483718647245160065155411906178401","104969914583647133688138850873296635220","71236523701371606345887569976527421886","5817267027779841646747387045328159047","112229038745610154776841776359980155072","301251672094961809541080344390646506895","206470908964031269504349799810650401966","142747354866119486378751976190381532061","3359671640883208723446241240784582557","229457387426840985692807097037938686496","99348645725761104502903614346706490320","61073926398202370944779700102614840095","338195221884535097529389567728854300950","172054108611211152923470813639838764587","55603041167814200641397610891032706793","334400182464957760977452442886972093561","62917350432312966505145015085076688178","39727055093291641978185404045453378012","17044708362688666055492600010992294191","12236028178073172750832076990790655672","174408628467327811924116382233192798509","80967660457737807069218812937698327250","242078329180628955657739480159565213333","65002898170558269280268105824612862348","56011098205819292347026436678509029841","122074115628562067181669588768359411858","232132384053172721506274160106498288751","262706331154293820079463259410262273415","74332225596787322433937353957600188270","247488636553721874041990733582699893626","200253693825877858802097545516534956623","88268408492484071756864315035450869653","277524298027918576529401567974093078639","263570497391482393141127627028493256453","284100227241472867830002815639869910937","4908432547494814081865315607486189091","253117311082765247671615710836733277250","91597015385106449721469185588708958319","210853388398845849635274067548549610618","66405864534107110796525244892274243848","95512567423678094410502899408979089229","37075117300512141578883275310451445804","85575028827725402379333317614196308198","29284214065035499887569055891438861357","271572149363476626228821744664476543598","288106910739684736435756895631203968069","64448057907168942902017811339755812486","15294351545919498036134166429624159488","280209975865229360678247885164232738566","316712706130947073834316014589694845962","53642588654329973686761510092756556969"],"threshold":0.9},"id":"CVE-2026-42881-c7c99c43","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp"}},{"target":{"file":"src/control.cpp"},"deprecated":false,"digest":{"line_hashes":["254060570332721726117385542122567890983","111836864918259161124425589217731969447","67389958747348187296464042656376075271","294026891544499895098824585418070851503"],"threshold":0.9},"id":"CVE-2026-42881-c89e7127","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigedit.cpp","function":"STIGEdit::SelectCheck"},"deprecated":false,"digest":{"function_hash":"151227281859645078338458961141856724017","length":842},"id":"CVE-2026-42881-ca1b4e33"},{"deprecated":false,"digest":{"line_hashes":["44675321068212922941356874940710918303","50347505792883509616418256759685636877","7631210551066736582687866634700967094","294577221816613060346749090315361207385","311438701280468395935532785114643727809","175701936345211367824947176277508978978","7631210551066736582687866634700967094","294577221816613060346749090315361207385","326106576704722184632107148633601032656","227268409986544193656611735724247161630","112872139415179725733112252188949271424","294577221816613060346749090315361207385","232816421226818881674862238439838290893","15741654157899231276947371871273445259","96225080516738068497249203107590636671","294577221816613060346749090315361207385","44444658417292035440179916356413587834","231964835014888787719849553796826902710","200330511232588005103045717863327509047","216900386005771478695601496003045638185","163309177265669090014612653506386904740","153064281154838793875235893921866532464","284573835874563183186071062224587978398","303749474727761973794528915311025164114","126110264974589302980516340876000976817","18816440825495136008135465382637983914","106344297087402721609888995309885769267","188824440629170996939912407862965136994","119198433177156540897359332945543636375","98033558558691993105106195157413283459","306839853105716128753650398082252899302","160848786517089767587947117903431174007","233361700306344549951688065195481530345","55486843737918287210341299968336343836","137649871091298875277581483514513729274","209640384894328720742445572588655234758","122298138859469187404480954053169934466","240431191061412613474599193644979579328","327030421947673012094312779330693374385"],"threshold":0.9},"id":"CVE-2026-42881-cc6c44f2","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerstigadd.cpp"}},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/common.cpp","function":"Excelify"},"deprecated":false,"digest":{"function_hash":"116995899552158053406674150705663441548","length":92},"id":"CVE-2026-42881-cea018d2","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"48321147067164122906456524296626934242","length":296},"id":"CVE-2026-42881-d00ad0b0","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"function":"WorkerCKLImport::process","file":"src/workercklimport.cpp"}},{"digest":{"threshold":0.9,"line_hashes":["111796268321752608928715205318442468826","140969124793018058115866700549477858273","217467443791685344291683797219021095944","231840982857111973637679175855939542867","125232462115141690813144000169298070825","315873658474340231224089238599922131752","113016836696239576429891183923871826128","104777528715131765600646451728205596301","94647626088460544342995636187325455898","162468387076630866977338524143315071993","277013629918481280532316282313453705084","51486832016397495323112366617956789132","186828391860426628007688372224970215863","284734562814275924993466671282498184090","241498035238484256593785129553339656871","289857780236365133156466965829752731622","59220410140712246417221981379325630499","228246841152098779874838006446048021870","55640025146030409843432516115438573470","328119248028385367431271449506070237832","221183635508979568785516607432692039693","243941141689543300871758408736258910457","340243473349338167206217488744208353251","113301482088630551411524376130846587871","294339899881994824882898918786469975912","141019771271233299680822747880928420140","129259190874518773304686897101203904186","167059970861871857786955034483696639135","123509186292084874818818143412422417193","277908554856101644859764747980618536728","200486607895492859491160057254313905166","256271233240928737917788677478962369344","269052804814550858201743026014090088765","67584484566391160283110510023314072943","190405210567966321573676784614676188623","296475859690956919416244682815283840089","180708927240478908064970329795135504052","12911743919388515013765955885774515885","21595221281838535616173540845694986393","85504898287354862607615038444481500742","12843545243821424583059787961969663049","277710946267690550149086825521497670725","180833262498454461642144939517510775867","211287352219311901782956912644902808793","53012586171536094197569107058392947251","136915017503385152039905178715676823283","216616375003456601352501328518555843248","44292088182352621077475852570087725433","121245541975056859884188404831451525537","37581581371593154003427441260443676941","149446111250336529056713646634942846280","280047779224931348192709875646644976650","232011122046950038176175112759832169236","104010605296215137330643620348698589557","256920333573609423998359245980827336045","51207710413389856482967527558501464424","110837646232738569889780964694462963013","48516074637302784311359841898970890797","169894395495410836115287251222897164831","297075297346578940260868673122632365720","273201338914540249396113661995882395764"]},"id":"CVE-2026-42881-d3022415","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/dbmanager.cpp"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["1084984572475428672485222352231115167","249979317905757764611584505840176779766","123869861682576241777638113953547750109","234887474298100670288193789744034017522","34989134616943467690186421086652117261","283184493865615770645925219704566323390","25337171436711970975685026458228914769","301889869351671059426280278908126935214"],"threshold":0.9},"id":"CVE-2026-42881-d4c8336f","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workercklexport.cpp"}},{"id":"CVE-2026-42881-e0443121","signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workeremassreport.cpp"},"deprecated":false,"digest":{"line_hashes":["147926698701110380101857704772063349783","141858046022908703799322265801345670059","90694644765485184925065589695980118290","253598033438593833080856763953786067951","158767755187470094354007965814377320625","147175855200506982558940751026815364918","187585241132221434562699898275425485643","65919196819498872690253734287009210412","205837507972435631073533435468663450620","53530293615656581430050453076819662503","33967622469727018709347781732820901745","180807780667757541326147712657820080407"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerfindingsreport.cpp","function":"WorkerFindingsReport::process"},"deprecated":false,"digest":{"function_hash":"113206817187060056754541874661047656455","length":9425},"id":"CVE-2026-42881-e244bcf2","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"241770487133517350429288649331560085001","length":245},"id":"CVE-2026-42881-e8441972","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"function":"STIGQter::~STIGQter","file":"src/stigqter.cpp"}},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigedit.cpp","function":"_s"},"deprecated":false,"digest":{"function_hash":"311844116857614633604081195182750659662","length":913},"id":"CVE-2026-42881-ea1e8de2","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::DisplayAssets"},"deprecated":false,"digest":{"length":317,"function_hash":"180102307059137807109500346063478669831"},"id":"CVE-2026-42881-eb167a79","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::DisplayCCIs"},"deprecated":false,"digest":{"function_hash":"336459686619114259862387836864435473395","length":368},"id":"CVE-2026-42881-eb753bff","signature_type":"Function"},{"source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::CleanThreads"},"deprecated":false,"digest":{"length":438,"function_hash":"258159485902004011779967238223306170240"},"id":"CVE-2026-42881-eecf2b35","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerimportemasscontrol.cpp"},"deprecated":false,"digest":{"line_hashes":["20920972529080138333493792210700881159","57290484848813037700786054812961960631","18585878010599272333505793845939349652","80274140386506180648827022245943354332","69704545545869015186323597995047457715","74460020579963992593804993736462422839","201981337124302516538911195797619154360","80274140386506180648827022245943354332"],"threshold":0.9},"id":"CVE-2026-42881-f12c8939"},{"id":"CVE-2026-42881-f1acd66b","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workerimportemass.cpp","function":"WorkerImportEMASS::process"},"deprecated":false,"digest":{"function_hash":"24591431530739684550496344170321862899","length":6752}},{"deprecated":false,"digest":{"function_hash":"63500476485869695548534041154067879024","length":9061},"id":"CVE-2026-42881-f1fdd07c","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/workeremassreport.cpp","function":"WorkerEMASSReport::process"}},{"deprecated":false,"digest":{"length":597,"function_hash":"196621986638680348099766264630520150794"},"id":"CVE-2026-42881-f5df8532","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::AddAsset"}},{"target":{"file":"src/workercklexport.cpp","function":"WorkerCKLExport::process"},"deprecated":false,"digest":{"length":1357,"function_hash":"116527592051827228546566461277254934105"},"id":"CVE-2026-42881-f7dd0e3f","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"target":{"function":"STIGEdit::UpdateSupplements","file":"src/stigedit.cpp"},"deprecated":false,"digest":{"function_hash":"194645015348943508382545869815545217435","length":320},"id":"CVE-2026-42881-f9f9ed99","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700"},{"deprecated":false,"digest":{"function_hash":"244547173522146707215768852680428218919","length":6811},"id":"CVE-2026-42881-facce884","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/stigqter.cpp","function":"STIGQter::RunTests"}},{"deprecated":false,"digest":{"length":4150,"function_hash":"183391269907682929860201965030258433560"},"id":"CVE-2026-42881-ff64dfbc","signature_type":"Function","signature_version":"v1","source":"https://github.com/squinky86/stigqter/commit/0765aed0ec37da883fb007b7be50778b352d1700","target":{"file":"src/dbmanager.cpp","function":"DbManager::UpdateSTIGCheck"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}