Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessInsufficient data - obtain vendor advisory
-
ExploitIdentify affected package and vector
-
ImpactReassess exploitability
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Improper handling of Windows device names
|
| Exploitation Conditions | Cannot be determined - the CVE record provides no description, no affected feature or configuration, and no CVSS vector. The sole datum is that the issue was reported via the Ubuntu vendor channel, which does not by itself establish any prerequisite. The affected package, deployment mode, and any required authentication or user interaction must be obtained from the Ubuntu Security Notice for CVE-2026-17545 before exploitation conditions can be stated. |
| Impact | Risk cannot be meaningfully assessed from the available data. The record for CVE-2026-17545 contains no description, no CVSS base score or vector, and no CWE classification. There is no EPSS probability, no CISA KEV listing, and no POC reference in the input, so exploitation status is: no public exploit identified at time of analysis. The only intelligence signal is the reporting source, 'vendor:ubuntu', which typically indicates an entry in the Ubuntu Security tracker for an open-source or Linux distribution package - but the specific package, attack vector, and impact are all unknown. Because CVSS is entirely absent, I cannot state attack vector, complexity, privilege requirements, or authentication needs. No conclusion about whether this is a genuine priority or a low-real-risk issue can be drawn until the underlying advisory is retrieved. Recommend pulling the Ubuntu Security Notice / CVE tracker page for CVE-2026-17545 to obtain the affected package, CVSS, and fix status before triage. |
| Exploit ScenarioDerived | No exploit scenario can be constructed because the vulnerability description, affected component, and CVSS vector are all missing. No POC is referenced in the provided data. Retrieve the Ubuntu advisory to determine the actual attack surface. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 25, 2026
The CVE-2026-17545 record is effectively empty: it ships with no description, no CVSS vector, no CWE mapping, and no CPE data, and the only intelligence attached to it is that it was reported through the Ubuntu vendor coordination channel. Because the affected package, the vulnerable component, and the required attacker position are all unknown, the risk to any specific Ubuntu deployment cannot be meaningfully assessed from the available data and no impact statement should be issued yet. No public exploit code has been identified at time of analysis, and no EPSS score, KEV listing, or proof-of-concept reference accompanies the record, so there is currently no signal of exploitation activity. The immediate action is intelligence collection rather than mitigation: retrieve the corresponding Ubuntu Security Notice and CVE tracker entry to learn which package and version range are involved before assigning severity or exposure.
RemediationAI
No vendor-released patch has been identified at time of analysis, because the record contains no fix version, no advisory reference, and no patch status field. The primary remediation path is therefore monitoring and rapid application of the eventual Ubuntu fix: track the Ubuntu CVE tracker page for CVE-2026-17545 and subscribe to ubuntu-security-announce so that the corresponding Ubuntu Security Notice is received as soon as it is published, then apply updates with apt update && apt upgrade (or the equivalent for the affected source package) and reboot or restart the affected service as the notice directs. If unattended-upgrades is not already enabled on the fleet, enabling it for the security pocket materially shortens exposure once the fix lands, at the cost of unexpected service restarts. Because the vulnerable feature, port, or configuration option is unknown, no targeted workaround can be recommended with confidence - inventing one such as disabling a service or blocking a port would risk breaking functionality without evidence that it reduces risk. If the tracker later shows the issue is confined to an optional component, the defensible compensating control is to remove or disable that component on internet-facing hosts until patched, accepting the loss of that functionality as the trade-off. Absent that information, treat the item as an unresolved intelligence gap and re-evaluate immediately once the Ubuntu advisory is available.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 4 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
There is no technical detail to analyse in the CVE record itself. The description field is empty, no CVSS vector is supplied (so neither attack vector, attack complexity, privileges required, nor user interaction can be derived), and no CWE identifier is provided, which means the root-cause class - memory corruption, injection, improper access control, cryptographic weakness, or something else entirely - is unknown. The absence of CPE strings also means the affected package name, upstream project, and version range are not enumerated in the feed data. The sole structured datum is the reporting channel: vendor:ubuntu, indicating the issue was routed through Canonical's security coordination process rather than, for example, a CNVD, GitHub advisory, or third-party research disclosure. That routing alone says nothing about severity, exploitability, or reach - Canonical coordinates both trivial and critical issues through the same channel. Confirming the technology stack requires pulling the Ubuntu CVE tracker page for CVE-2026-17545 (which normally lists the source package, the affected Ubuntu releases, and the fix version) and the matching Ubuntu Security Notice (USN), which will supply the description, the impact classification, and the patched package versions that are missing here.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H
Primary rating from Vendor (vendor:ubuntu).
CVSS VectorVendor: vendor:ubuntu
Lifecycle Timeline
1DescriptionCVE.org
[Unknown description]
Threat Intelligence Overview
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Same weakness CWE-67 – Improper Handling of Windows Device Names
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| openSUSE Tumbleweed | Fixed |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server 16.0 | Not-Affected |
| SUSE Linux Enterprise Server 16.1 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Not-Affected |
| openSUSE Leap 16.0 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Not-Affected |
| SUSE Linux Enterprise Module for Legacy 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Module for Legacy 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Module for Legacy 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Not-Affected |
| SUSE CaaS Platform 4.0 | Not-Affected |
| SUSE Enterprise Storage 6 | Not-Affected |
| SUSE Enterprise Storage 7 | Not-Affected |
| SUSE Enterprise Storage 7.1 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP1 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP2 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP3 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Server 15 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP1-BCL | Not-Affected |
| SUSE Linux Enterprise Server 15 SP1-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP2-BCL | Not-Affected |
| SUSE Linux Enterprise Server 15 SP2-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP3-BCL | Not-Affected |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15-LTSS | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Not-Affected |
| SUSE Manager Proxy 4.0 | Not-Affected |
| SUSE Manager Proxy 4.1 | Not-Affected |
| SUSE Manager Proxy 4.2 | Not-Affected |
| SUSE Manager Proxy 4.3 | Not-Affected |
| SUSE Manager Proxy 4.3 | Not-Affected |
| SUSE Manager Retail Branch Server 4.0 | Not-Affected |
| SUSE Manager Retail Branch Server 4.1 | Not-Affected |
| SUSE Manager Retail Branch Server 4.2 | Not-Affected |
| SUSE Manager Retail Branch Server 4.3 | Not-Affected |
| SUSE Manager Retail Branch Server 4.3 | Not-Affected |
| SUSE Manager Server 4.0 | Not-Affected |
| SUSE Manager Server 4.1 | Not-Affected |
| SUSE Manager Server 4.2 | Not-Affected |
| SUSE Manager Server 4.3 | Not-Affected |
| SUSE Manager Server 4.3 | Not-Affected |
| SUSE Manager Server LTS 4.3 | Not-Affected |
| openSUSE Leap 15.3 | Not-Affected |
| openSUSE Leap 15.4 | Not-Affected |
| openSUSE Leap 15.4 | Not-Affected |
| openSUSE Leap 15.5 | Not-Affected |
| openSUSE Leap 15.5 | Not-Affected |
| openSUSE Leap 15.6 | Not-Affected |
| openSUSE Leap 15.6 | Not-Affected |
| SUSE Linux Enterprise Server for NVIDIA 16.1 | Not-Affected |
EUVD-2026-87329
NVD
CVE.org
EPSS
GitHub
VulDB
Exploit-DB