diff --git a/2018/9xxx/CVE-2018-9846.json b/2018/9xxx/CVE-2018-9846.json
index 8f55acf5935..b9999248e60 100644
--- a/2018/9xxx/CVE-2018-9846.json
+++ b/2018/9xxx/CVE-2018-9846.json
@@ -61,6 +61,11 @@
             "name" : "https://github.com/roundcube/roundcubemail/issues/6238",
             "refsource" : "MISC",
             "url" : "https://github.com/roundcube/roundcubemail/issues/6238"
+         },
+         {
+            "name" : "https://medium.com/@ndrbasi/cve-2018-9846-roundcube-303097048b0a",
+            "refsource" : "MISC",
+            "url" : "https://medium.com/@ndrbasi/cve-2018-9846-roundcube-303097048b0a"
          }
       ]
    }
diff --git a/2018/9xxx/CVE-2018-9854.json b/2018/9xxx/CVE-2018-9854.json
new file mode 100644
index 00000000000..0a71ee64287
--- /dev/null
+++ b/2018/9xxx/CVE-2018-9854.json
@@ -0,0 +1,18 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2018-9854",
+      "STATE" : "RESERVED"
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided."
+         }
+      ]
+   }
+}