VULNERABILITY INTELLIGENCE

CVE-2026-25707

CVSS score8.8 HIGH
EPSS probability0.60%
CISA KEVNot currently listed
Published2026-06-29
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

Weakness classification

  • CWE-23: Relative Path Traversal

Primary references