CVE-2026-44230

unknown

Published — · Modified —

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

—

Description

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2026-44230 NameCVE-2026-44230 SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Vulnerable and fixed packages The table below lists information on source packages. Source PackageReleaseVersionStatus request-tracker5 (PTS)bookworm5.0.3+dfsg-3~deb12u5fixed bookworm…

CVE-2026-44230

Name	CVE-2026-44230
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
request-tracker5 (PTS)	bookworm	5.0.3+dfsg-3~deb12u5	fixed
	bookworm (security)	5.0.3+dfsg-3~deb12u4	fixed
	trixie	5.0.7+dfsg-4+deb13u2	vulnerable
	trixie (security)	5.0.7+dfsg-4+deb13u1	vulnerable
	forky, sid	5.0.10+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
request-tracker5	source	bookworm	(not affected)
request-tracker5	source	(unstable)	5.0.10+dfsg-1

Notes

[bookworm] - request-tracker5 <not-affected> (Vulnerable code introduced later)
https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
Introduced with: https://github.com/bestpractical/rt/commit/1db06229c5839a158f2365c436d9aa325d6ea459 (rt-5.0.4beta1)
Fixed by: https://github.com/bestpractical/rt/commit/510d8d6c6a260da22830039e362c990a6c029665 (rt-5.0.10)

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

[bookworm] - request-tracker5 <not-affected> (Vulnerable code introduced later)https://github.com/bestpractical/rt/releases/tag/rt-5.0.10Introduced with: https://github.com/bestpractical/rt/commit/1db06229c5839a158f2365c436d9aa325d6ea459 (rt-5.0.4beta1)Fixed by: https://github.com/bestpractical/rt/commit/510d8d6c6a260da22830039e362c990a6c029665 (rt-5.0.10)

OS impact

OS	Version	Status	Fixed in
debian	forky	fixed	`5.0.10+dfsg-1`
debian	sid	fixed	`5.0.10+dfsg-1`
debian	trixie	affected
debian	bookworm	fixed	`0`

References

https://security-tracker.debian.org/tracker/CVE-2026-44230

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.