What is the CVSS score of CVE-2026-54432?

CVE-2026-54432 has a CVSS 3.1 base score of 4.7 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-54432?

Yes, a patch is available for CVE-2026-54432. Update the affected software to the latest version immediately.

Ubuntu CVE-2026-54432

EUVD-2026-43733 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-07-06 vendor:ubuntu

GHSA-w8fm-hrh6-r2j7

XSS Suse

4.7

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

4.7 MEDIUM

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

SUSE

MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Jul 14, 2026 - 18:20 EUVD

CVSS changed

Jul 14, 2026 - 17:22 NVD

4.7 (MEDIUM)

Analysis Generated

Jul 06, 2026 - 20:22 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-54432 is a vulnerability reported by Ubuntu with no description, CVSS score, CWE classification, or technical detail available in the provided intelligence data. The affected product is inferred as Ubuntu Linux based solely on the vendor reporter tag. No impact, attack vector, or exploitability information can be determined from the current data set.

Technical ContextAI

No description, CWE, CPE strings, or CVSS vector were provided. The only available signal is the reporter tag 'vendor:ubuntu', which indicates Ubuntu disclosed or acknowledged this CVE. The affected component, underlying technology, root cause class, and software versions are entirely unknown from this data set.

RemediationAI

No remediation can be prescribed. No patch version, advisory URL, workaround, or compensating control data was provided. Analysts should monitor the Ubuntu Security Notices portal (ubuntu.com/security/notices) and the NVD entry for CVE-2026-54432 for updated guidance. Until details are published, applying general Ubuntu patching hygiene - keeping apt package indexes current and applying security-tier updates promptly - is the only actionable advice at this time.