Is there a patch available for CVE-2026-58254?

Yes, a patch is available for CVE-2026-58254. Update the affected software to the latest version immediately.

Unknown CVE-2026-58254

Q: What is the CVSS score of CVE-2026-58254?

CVE-2026-58254 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-42386 MEDIUM

Incorrect Authorization (CWE-863)

2026-07-06 vendor:ubuntu

Authentication Bypass Red Hat Nats Server Linuxfoundation

5.3

CVSS 4.0 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Red Hat

6.5 MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 08, 2026 - 21:04 EUVD

CVSS changed

Jul 08, 2026 - 20:22 NVD

5.3 (MEDIUM)

Analysis Generated

Jul 06, 2026 - 20:16 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-58254 has been reported through Ubuntu's vendor channel, but no description, CVSS score, CWE classification, or technical details are available in the provided intelligence data. The affected product, vulnerability class, and impact cannot be characterized at this time. No meaningful synthesis is possible without a description, patch reference, or advisory content.

Technical ContextAI

No technical details are available. The CVE description is listed as unknown, no CWE root cause class has been assigned, no CPE strings identifying the affected software were provided, and no CVSS vector was supplied to indicate attack surface or component type. The sole intelligence signal is that Ubuntu is listed as the reporting vendor, which places the affected package likely within the Ubuntu/Debian ecosystem, but the specific package, version, and vulnerability class are unconfirmed.

RemediationAI

No remediation guidance can be issued. No patch version, upstream fix, or vendor advisory was included in the available intelligence. Organizations should monitor the Ubuntu Security Notices site (ubuntu.com/security/notices) and the NVD entry for CVE-2026-58254 for updated advisory content. No compensating controls can be recommended without knowledge of the affected component or vulnerability class. No patch exists per available data - absence of patch data should not be interpreted as confirmation that no patch exists.