{"$schema":"https://docs.oasis-open.org/csaf/csaf/v2.0/csaf_json_schema.json","document":{"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"notes":[{"category":"summary","text":"THIS IS DUMMY TEST DATA3. Acme Corporation has released a patch addressing a critical remote code execution vulnerability in AcmeWidget Pro.","title":"Summary"}],"publisher":{"category":"vendor","contact_details":"psirt@acmecorp.example.com","issuing_authority":"Acme Product Security Incident Response Team (PSIRT)","name":"Acme Corporation","namespace":"https://www.acmecorp.example.com"},"title":"DUMMY TEST: Sample Security Advisory","tracking":{"current_release_date":"2026-05-19T00:00:00Z","generator":{"date":"2026-08-19T00:00:00Z","engine":{"name":"Dummy Test Generator","version":"1.0"}},"id":"ACME-2026-0001","initial_release_date":"2026-05-19T00:00:00Z","revision_history":[{"date":"2026-05-19T00:00:00Z","number":"1.0.0","summary":"Initial publication"}],"status":"final","version":"1.0.0"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"3.1.0","product":{"name":"AcmeWidget Pro 3.1.0","product_id":"ACMEWIDGET-3.1.0"}},{"category":"product_version","name":"3.1.5","product":{"name":"AcmeWidget Pro 3.1.5 (patched)","product_id":"ACMEWIDGET-3.1.5"}}],"category":"product_family","name":"AcmeWidget Pro"}],"category":"vendor","name":"Acme Corporation"}]},"vulnerabilities":[{"cve":"CVE-2026-10001","cwe":{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"},"notes":[{"category":"description","text":"THIS IS DUMMY TEST DATA. An unauthenticated remote code execution vulnerability exists in the AcmeWidget Pro REST API. A remote attacker could craft a malicious request to execute arbitrary commands on the server.","title":"Description"}],"product_status":{"fixed":["ACMEWIDGET-3.1.5"],"known_affected":["ACMEWIDGET-3.1.0"]},"remediations":[{"category":"vendor_fix","details":"Upgrade AcmeWidget Pro to version 3.1.5 or later.","product_ids":["ACMEWIDGET-3.1.0"],"url":"https://www.acmecorp.example.com/downloads/acmewidget-3.1.5"}],"scores":[{"cvss_v3":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":2.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"products":["ACMEWIDGET-3.1.0"]}],"title":"Remote Code Execution via Unauthenticated API Endpoint"}]}