CVE-2025-26843

unknown
Published — · Modified —
CVSS v3
CVSS v4 NEW
not yet in upstream
VIR risk

Description

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2025-26843 NameCVE-2025-26843 SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Vulnerable and fixed packages The table below lists information on source packages. Source PackageReleaseVersionStatus znuny (PTS)bookworm/non-free6.5.1-1vulnerable trixie/non-free6.5.15-2vulnerable…

CVE-2025-26843

NameCVE-2025-26843
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
znuny (PTS)bookworm/non-free6.5.1-1vulnerable
trixie/non-free6.5.15-2vulnerable
forky/non-free6.5.20-1vulnerable
sid/non-free6.5.21-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
znunysource(unstable)6.5.21-1

Notes

[trixie] - znuny <no-dsa> (Non-free not supported)
[bookworm] - znuny <no-dsa> (Non-free not supported)
https://www.znuny.org/en/advisories/zsa-2026-08

Home - Debian Security - Source (Git)

Apply commands

text fix
Notes
[trixie] - znuny <no-dsa> (Non-free not supported)[bookworm] - znuny <no-dsa> (Non-free not supported)https://www.znuny.org/en/advisories/zsa-2026-08

OS impact

OSVersionStatusFixed in
debian debianbookwormaffected
debian debianforkyaffected
debian debiansidfixed6.5.21-1
debian debiantrixieaffected

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.