← Voltar para CVEs
CVE-2026-26099
MEDIUM5.5
Descricao
Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.
Detalhes CVE
Pontuacao CVSS v3.15.5
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado2/20/2026
Ultima modificacao2/27/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
owlcyberdefense:opds-100owlcyberdefense:opds-1000owlcyberdefense:opds-talon
Fraquezas (CWE)
CWE-427
Referencias
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26099(prodsec@nozominetworks.com)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.