What is the CVSS score of CVE-2026-54432?

CVE-2026-54432 has a CVSS 3.1 base score of 4.7 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-54432?

Yes, a patch is available for CVE-2026-54432. Update the affected software to the latest version immediately.

Ubuntu CVE-2026-54432

EUVD-2026-43733 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-07-06 vendor:ubuntu

GHSA-w8fm-hrh6-r2j7

XSS

4.7

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

4.7 MEDIUM

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from Vendor (vendor:ubuntu) · only source for this CVE.

CVSS VectorVendor: vendor:ubuntu

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Jul 14, 2026 - 18:20 EUVD

CVSS changed

Jul 14, 2026 - 17:22 NVD

4.7 (MEDIUM)

Analysis Generated

Jul 06, 2026 - 20:22 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-54432 is a vulnerability reported by Ubuntu with no description, CVSS score, CWE classification, or technical detail available in the provided intelligence data. The affected product is inferred as Ubuntu Linux based solely on the vendor reporter tag. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Unknown

Exploit

Unknown

Impact

Unknown

Access

Unknown

Exploit

Unknown

Impact

Unknown

Vulnerability AssessmentAI

Exploitation	Exploitation conditions are entirely unknown - no description, CVSS vector, or technical detail was provided. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Risk cannot be assessed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	No exploit scenario can be constructed. The vulnerability description, attack vector, and affected component are all unknown. …
Remediation	No remediation can be prescribed. … Detailed patch versions, workarounds, and compensating controls in full report.