Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-25707

Опубликовано: 29 июн. 2026
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*
Версия до 17.38.10 (исключая)

EPSS

Процентиль: 35%
0.00421
Низкий

8.8 High

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 месяцев назад

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

CVSS3: 8.8
redhat
около 2 месяцев назад

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

CVSS3: 8.8
debian
около 2 месяцев назад

A relative path traversal bug problem when processing repository metad ...

CVSS3: 8.8
github
около 2 месяцев назад

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

suse-cvrf
около 2 месяцев назад

Security update for libzypp

EPSS

Процентиль: 35%
0.00421
Низкий

8.8 High

CVSS3

Дефекты

CWE-23