PT-2026-21266 · Owl Opds · Owl Opds

Publicado 2026-02-20 · Atualizado 2026-02-20 · CVE-2026-26099

Positive Technologies (AI Summary)

CVSS v4.0

8.4

Alta

Vetor base

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Owl opds version 2.2.0.4

Description An uncontrolled search path element exists in Owl opds 2.2.0.4. This allows leveraging or manipulating configuration file search paths through a specially crafted network request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2026-26099

Produtos afetados

Owl Opds

Referências · 4

• https://twitter.com/CVEnew/status/2024988784363012426 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-26099 · Aviso do Fabricante
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2026-26099 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-26099 · Nota de Segurança