What is the CVSS score of CVE-2026-58211?

CVE-2026-58211 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-58211?

Yes, a patch is available for CVE-2026-58211. Update the affected software to the latest version immediately.

Unknown (Ubuntu) CVE-2026-58211

EUVD-2026-42390 MEDIUM

Incorrect Authorization (CWE-863)

2026-07-06 vendor:ubuntu

Authentication Bypass Red Hat Nats Server Linuxfoundation

5.4

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Red Hat

6.5 MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Jul 08, 2026 - 22:04 EUVD

CVSS changed

Jul 08, 2026 - 21:22 NVD

5.4 (MEDIUM)

Analysis Generated

Jul 06, 2026 - 20:19 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-58211 was reported by Ubuntu with no description, CVSS score, CWE, or technical detail available at time of analysis. The affected product, vulnerability class, and impact cannot be determined from available data. Security teams should monitor the Ubuntu security tracker and NVD for updates before assessing risk.

Technical ContextAI

No technical context can be established. The CVE description is absent, no CWE root-cause class is assigned, no CPE strings identify affected packages or versions, and no CVSS vector describes the attack surface. The sole intelligence signal is that Ubuntu reported this CVE, suggesting it likely affects a package in the Ubuntu ecosystem, but the specific package, library, or component is unconfirmed.

RemediationAI

No remediation can be recommended. No patch version, advisory URL, or affected component has been identified. Security teams should monitor the Ubuntu Security Notices (https://ubuntu.com/security/notices) and the Ubuntu CVE tracker for this CVE ID. No vendor-released patch identified at time of analysis. Do not apply speculative mitigations without confirmed affected component data.