PT-2026-21547 · Gnome+2 · Evolution Data Server+2

Osidb Bzimport · CVE-2026-2604 · Published 2026-01-01 · Updated 2026-06-17

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions evolution-data-server versions 22.04 through 25.10

Description The software contains a flaw related to insecure local cache file removal. This could allow for unauthorized access or modification of cached data.

Recommendations Update to a newer version that addresses the insecure local cache file removal issue.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2026-2604

OESA-2026-2354

OESA-2026-2355

OESA-2026-2356

OESA-2026-2632

OESA-2026-2633

OPENSUSE-SU-2026:10262-1

OPENSUSE-SU-2026:20864-1

SUSE-SU-2026:0775-1

SUSE-SU-2026:0776-1

USN-8055-1

USN-8055-2

Affected Products

Linuxmint

Ubuntu

Evolution Data Server

References · 37

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2604.json · Exploit
• 🔥 https://gitlab.gnome.org/GNOME/evolution-data-server/-/work_items/627 · Exploit
• https://ubuntu.com/security/notices/USN-8055-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-2604 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2604 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-2604 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8055-2 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2354 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10262-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0776-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-2604 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0775-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2355 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2632 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2356 · Vendor Advisory