Get real-time updates on Telegram
CVE-2026-14967: bbot from 1.1.7 (inclusive), through 2.8.6 (inclusive), 3.0.0.0 · update rc, 3.0.0.647 · update rc (+60 more affected…
CVE-2026-14967. CVSS 3.1 base score 3.1 (LOW, Vendor/CNA). EPSS 0.00261 (percentile 0.17729), scored 25-Oct-2026.
Affected technology
bbot · from 1.1.7 (inclusive), through 2.8.6 (inclusive)
blacklanternsecurity
bbot · 3.0.0.0 · update rc
blacklanternsecurity
bbot · 3.0.0.647 · update rc
blacklanternsecurity
bbot · 3.0.0.649 · update rc
blacklanternsecurity
bbot · 3.0.0.652 · update rc
blacklanternsecurity
bbot · 3.0.0.654 · update rc
blacklanternsecurity
bbot · 3.0.0.659 · update rc
blacklanternsecurity
bbot · 3.0.0.669 · update rc
blacklanternsecurity
bbot · 3.0.0.671 · update rc
blacklanternsecurity
bbot · 3.0.0.673 · update rc
blacklanternsecurity
bbot · 3.0.0.691 · update rc
blacklanternsecurity
bbot · 3.0.0.765 · update rc
blacklanternsecurity
bbot · 3.0.0.767 · update rc
blacklanternsecurity
bbot · 3.0.0.773 · update rc
blacklanternsecurity
bbot · 3.0.0.782 · update rc
blacklanternsecurity
bbot · 3.0.0.786 · update rc
blacklanternsecurity
bbot · 3.0.0.793 · update rc
blacklanternsecurity
bbot · 3.0.0.795 · update rc
blacklanternsecurity
bbot · 3.0.0.798 · update rc
blacklanternsecurity
bbot · 3.0.0.819 · update rc
blacklanternsecurity
bbot · 3.0.0.821 · update rc
blacklanternsecurity
bbot · 3.0.0.829 · update rc
blacklanternsecurity
bbot · 3.0.0.836 · update rc
blacklanternsecurity
bbot · 3.0.0.849 · update rc
blacklanternsecurity
bbot · 3.0.0.851 · update rc
blacklanternsecurity
bbot · 3.0.0.858 · update rc
blacklanternsecurity
bbot · 3.0.0.870 · update rc
blacklanternsecurity
bbot · 3.0.0.876 · update rc
blacklanternsecurity
bbot · 3.0.0.884 · update rc
blacklanternsecurity
bbot · 3.0.0.897 · update rc
blacklanternsecurity
bbot · 3.0.0.903 · update rc
blacklanternsecurity
bbot · 3.0.0.907 · update rc
blacklanternsecurity
bbot · 3.0.0.909 · update rc
blacklanternsecurity
bbot · 3.0.0.981 · update rc
blacklanternsecurity
bbot · 3.0.0.986 · update rc
blacklanternsecurity
bbot · 3.0.0.1056 · update rc
blacklanternsecurity
bbot · 3.0.0.1062 · update rc
blacklanternsecurity
bbot · 3.0.0.1064 · update rc
blacklanternsecurity
bbot · 3.0.0.1068 · update rc
blacklanternsecurity
bbot · 3.0.0.1070 · update rc
blacklanternsecurity
bbot · 3.0.0.1079 · update rc
blacklanternsecurity
bbot · 3.0.0.1137 · update rc
blacklanternsecurity
bbot · 3.0.0.1139 · update rc
blacklanternsecurity
bbot · 3.0.0.1141 · update rc
blacklanternsecurity
bbot · 3.0.0.1153 · update rc
blacklanternsecurity
bbot · 3.0.0.1173 · update rc
blacklanternsecurity
bbot · 3.0.0.1184 · update rc
blacklanternsecurity
bbot · 3.0.0.1190 · update rc
blacklanternsecurity
bbot · 3.0.0.1254 · update rc
blacklanternsecurity
bbot · 3.0.0.1271 · update rc
blacklanternsecurity
bbot · 3.0.0.1274 · update rc
blacklanternsecurity
bbot · 3.0.0.1304 · update rc
blacklanternsecurity
bbot · 3.0.0.1313 · update rc
blacklanternsecurity
bbot · 3.0.0.1317 · update rc
blacklanternsecurity
bbot · 3.0.0.1333 · update rc
blacklanternsecurity
bbot · 3.0.0.1343 · update rc
blacklanternsecurity
bbot · 3.0.0.1345 · update rc
blacklanternsecurity
bbot · 3.0.0.1349 · update rc
blacklanternsecurity
bbot · 3.0.0.1386 · update rc
blacklanternsecurity
bbot · 3.0.0.1388 · update rc
blacklanternsecurity
bbot · 3.0.0.1390 · update rc
blacklanternsecurity
bbot · 3.0.0.1401 · update rc
blacklanternsecurity
bbot · 3.0.0.1407 · update rc
blacklanternsecurity
BBOT · 1.1.7 through 2.8.6
Black Lantern Security
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required
What an attacker can do
Vendor/CNA’s CVSS 3.1 assessment (base score 3.1/10) rates confidentiality and availability impact as none; integrity impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-22
- CCR priority
- 12.5 /100 (P5)
- CVSS 3.1
- 3.1 /10 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N · Vendor/CNA
- EPSS
- 0.00261 · percentile 0.17729 · 2026-10-25
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-25 21:44:36.062275+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-14967.html