VDB

CVE-2026-58015

CVE-2026-58015 PUBLISHED CVSS 5.9 MEDIUM

Reported by redhat · Published June 30, 2026

A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.

Risk Scores

CVSS 3.1
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
GNOMEGLib0
Red HatRed Hat Enterprise Linux 100:2.80.4-12.el10_2.21
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:2.80.4-4.el10_0.17
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:2.56.1-13.el7_9.1
Red HatRed Hat Enterprise Linux 80:2.70.1-9.el8_10
Red HatRed Hat Enterprise Linux 80:2.56.4-177.el8_10
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:2.56.4-10.el8_4.7
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On0:2.56.4-10.el8_4.7
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:2.56.4-158.el8_6.7
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On0:2.56.4-158.el8_6.7
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:2.56.4-165.el8_8.2
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:2.56.4-165.el8_8.2
Red HatRed Hat Enterprise Linux 90:2.68.4-19.el9_8.9
Red HatRed Hat Enterprise Linux 90:2.68.4-19.el9_8.9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:2.68.4-7.el9_2.7
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:2.68.4-14.el9_4.8
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:2.68.4-16.el9_6.7
Red HatRed Hat OpenShift Container Platform 4.12412.86.202609171314-0
Red HatRed Hat OpenShift Container Platform 4.13413.92.202609302032-0
Red HatRed Hat OpenShift Container Platform 4.14414.92.202609282130-0

…and 172 more

Timeline

  • Jun 30, 2026 CVE Published
  • Jul 1, 2026 Coalition ESS Score
  • Jul 2, 2026 EPSS Score
  • Aug 3, 2026 Distribution Patch
  • Aug 3, 2026 Security Advisory
  • Aug 7, 2026 EPSS Score
  • Aug 17, 2026 Distribution Patch
  • Aug 17, 2026 Security Advisory
  • Aug 17, 2026 Distribution Patch
  • Aug 19, 2026 Distribution Patch
  • Aug 19, 2026 Security Advisory
  • Aug 24, 2026 EPSS Score

References

…and 61 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›