[
  {
    "cveId": "CVE-2023-27350",
    "title": "PaperCut MF/NG Improper Access Control Vulnerability",
    "vendor": "PaperCut",
    "product": "MF/NG",
    "dateAdded": "2023-04-21",
    "publishedDueDate": "2023-05-12",
    "requiredAction": "Apply updates per vendor instructions.",
    "knownRansomwareCampaignUse": "Known",
    "matchedWatchlist": [
      {
        "field": "cveId",
        "term": "CVE-2023-27350",
        "sourceValue": "CVE-2023-27350"
      }
    ],
    "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27350",
    "sourceUrl": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
    "observedAt": "2026-10-09T04:00:42.722Z",
    "comparisonStatus": "not_requested"
  },
  {
    "cveId": "CVE-2021-44228",
    "title": "Apache Log4j2 Remote Code Execution Vulnerability",
    "vendor": "Apache",
    "product": "Log4j2",
    "dateAdded": "2021-12-10",
    "publishedDueDate": "2021-12-24",
    "requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",
    "knownRansomwareCampaignUse": "Known",
    "matchedWatchlist": [
      {
        "field": "cveId",
        "term": "CVE-2021-44228",
        "sourceValue": "CVE-2021-44228"
      }
    ],
    "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44228",
    "sourceUrl": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
    "observedAt": "2026-10-09T04:00:43.917Z",
    "comparisonStatus": "not_requested"
  }
]