What is the CVSS score of CVE-2026-58209?

CVE-2026-58209 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-58209?

Yes, a patch is available for CVE-2026-58209. Update the affected software to the latest version immediately.

Unknown (Ubuntu) CVE-2026-58209

EUVD-2026-42347 MEDIUM

Incorrect Authorization (CWE-863)

2026-07-06 vendor:ubuntu

Authentication Bypass Red Hat Nats Server Linuxfoundation

4.3

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Red Hat

4.3 MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 08, 2026 - 21:04 EUVD

CVSS changed

Jul 08, 2026 - 20:22 NVD

4.3 (MEDIUM)

Analysis Generated

Jul 06, 2026 - 20:20 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

Insufficient data exists to characterize CVE-2026-58209 beyond its association with an Ubuntu vendor report. The CVE description is absent, no CVSS score or vector has been assigned, no CWE root cause is identified, and no additional intelligence sources were provided. Security teams should treat this as an unresolved reservation requiring active follow-up with Ubuntu Security Notices (USN) or the NVD pending full disclosure.

Technical ContextAI

No description, CPE strings, or CWE data were provided in the input. The sole intelligence signal is attribution to 'vendor:ubuntu', indicating this CVE was reported through or assigned in relation to the Ubuntu distribution. The affected package, component, protocol, or underlying technology cannot be determined from available data. Ubuntu packages span a vast range of upstream projects; without a USN advisory or package name, no technical context can be established.

RemediationAI

No remediation can be prescribed. No patch version, advisory URL, or vulnerability type is available from the provided data. Until a Ubuntu Security Notice or upstream advisory is published, the recommended action is to monitor ubuntu.com/security/notices and subscribe to the ubuntu-security-announce mailing list for disclosure. No specific compensating controls can be suggested without knowing the affected component, attack vector, or exploitation conditions.