PT-2026-48396 · Debusine · Debusine

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-11852

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Debusine (affected versions not specified)

Description Debusine is an integrated solution used to build, distribute, and maintain Debian-based distributions, where managed files are organized into artifacts. The endpoints responsible for creating and deleting relationships between these artifacts fail to enforce proper permission checks, requiring only that the user be able to see the artifacts involved.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-11852

Affected Products

Debusine

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-11852 · Security Note
• https://salsa.debian.org/freexian-team/debusine/-/commit/98104f46dc546a27a0326d5ef728ac7f426c430a · Note
• https://salsa.debian.org/freexian-team/debusine/-/work_items/1499 · Note
• https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2836 · Note
• https://twitter.com/CVEnew/status/2064709836751651144 · Twitter Post