Dashboard / CVE-2026-123268

CVE-2026-123268

LOW
INFO Priority: 0.00 BB Relevance: 44/100
Published: 2026-11-06 Modified: 2026-11-09 First seen: 2026-11-06 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Passive
S: X
AT: None
VC: None
VI: None
VA: Low

Description

A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c of the component Extent Data File Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The identifier of the patch is 175d3fc0a0b961f362f16e7560a6169d7213e16b. Applying a patch is the recommended action to fix this issue.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
libyal libvmdk 3fdd7839758e9f44ef95e1dfccde8552b860a4fc
libyal libvmdk 3fdd7839758e9f44ef95e1dfccde8552b860a4fc

References & Advisories (8)

https://vuldb.com/vuln/431574
vdb-entry technical-description
https://vuldb.com/submit/1028405
third-party-advisory
https://vuldb.com/vuln/431574/cti
signature permissions-required

Bug Bounty Relevance

44 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.24%
Raw Score 0.002390
Percentile 15.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00239
2026-11-12
0.00239
2026-11-10
0.00239
2026-11-09
0.00239
2026-11-08
0.00239
2026-11-07
0.00239
2026-11-06
0.00239

Intelligence Sources

mitre ref →
nvd ref →

External Links