Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-58015: A flaw was found in GLib

49
This week
MEDIUM 5.9REMOTEWATCHLISTUPGRADEMITIGATE

CVE-2026-58015 is a medium-severity flaw (CVSS 5.9) affecting glib, enterprise linux. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.

Why this priority

  • Public exploit reference
  • Remotely exploitable, no login, no user action
  • On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score5.9 (Medium)
Attack vectorNetwork (remote)
Attack complexityHigh
Privileges neededNone
User interactionNone
EPSS exploit chance0.8% (top 45%)
CISA exploited listNo
WeaknessCWE-22
Published2026-06-30
Last modified2026-10-22
Publisher (CNA): Red Hat, Inc. · Vendor: gnome · redhat

Last updated 2026-10-22 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

gnome glib UPGRADE
Affected: < 2.88.1
Fixed in: 2.88.1
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy glib || rpm -q glib || glib --version
2. UPGRADE to 2.88.1 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade glib
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade glib
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
redhat enterprise linux MITIGATE
Affected: 6.0 · 7.0 · 8.0 · 9.0 · 10.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 6.0
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Exact fixes by distribution

A distro patch exists: prefer upgrading over downgrading.
Fedora 46 · python-fontconfig · FIXED · 0.6.3-1.fc46 · FEDORA-2026-f92ca8b01f · source
sudo dnf upgrade --advisory=FEDORA-2026-f92ca8b01f
Fedora ELN · valgrind · FIXED · 3.28.0-1.eln159 · FEDORA-2026-c593ef1d15 · source
sudo dnf upgrade --advisory=FEDORA-2026-c593ef1d15
Ubuntu 20.04 · glib2.0 · FIXED · 2.64.6-1~ubuntu20.04.9+esm2
sudo apt update && sudo apt install --only-upgrade glib2.0 dpkg --compare-versions "$(dpkg-query -W -f='${Version}' glib2.0)" ge "2.64.6-1~ubuntu20.04.9+esm2" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 22.04 · glib2.0 · FIXED · 2.72.4-0ubuntu2.10
sudo apt update && sudo apt install --only-upgrade glib2.0 dpkg --compare-versions "$(dpkg-query -W -f='${Version}' glib2.0)" ge "2.72.4-0ubuntu2.10" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 24.04 · glib2.0 · FIXED · 2.80.0-6ubuntu3.9
sudo apt update && sudo apt install --only-upgrade glib2.0 dpkg --compare-versions "$(dpkg-query -W -f='${Version}' glib2.0)" ge "2.80.0-6ubuntu3.9" && echo PATCHED || echo STILL-VULNERABLE
Debian 12 · glib2.0 · NO FIX YET
Debian 13 · glib2.0 · FIXED · 2.84.4-3~deb13u4
sudo apt update && sudo apt install --only-upgrade glib2.0 dpkg --compare-versions "$(dpkg-query -W -f='${Version}' glib2.0)" ge "2.84.4-3~deb13u4" && echo PATCHED || echo STILL-VULNERABLE
RHEL 10 · glib2 · FIXED · glib2-2.80.4-12.el10_2.21
sudo dnf upgrade --advisory=RHSA-2026:57015 rpm -q glib2
RHEL 10.0 Extended Update Support · glib2 · FIXED · glib2-2.80.4-4.el10_0.17
sudo dnf upgrade --advisory=RHSA-2026:65767 rpm -q glib2
RHEL 7 Extended Lifecycle Support · glib2 · FIXED · glib2-2.56.1-13.el7_9.1
sudo dnf upgrade --advisory=RHSA-2026:65773 rpm -q glib2
RHEL 8 · mingw-glib2 · FIXED · mingw-glib2-2.70.1-9.el8_10
sudo dnf upgrade --advisory=RHSA-2026:49512 rpm -q mingw-glib2
RHEL 8 · glib2 · FIXED · glib2-2.56.4-177.el8_10
sudo dnf upgrade --advisory=RHSA-2026:61766 rpm -q glib2
Amazon Linux 2023 · see advisory · FIXED · ALAS2023-2026-1942 · source
sudo dnf update --advisory=ALAS2023-2026-1942
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-58015?

glib: upgrade to 2.88.1; enterprise linux: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2026-58015 being exploited?

CVE-2026-58015 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-58015 affect?

CVE-2026-58015 affects glib, enterprise linux. Severity is medium (CVSS 5.9). A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_conte

How urgent is CVE-2026-58015?

Priority 49/100. Public exploit reference; Remotely exploitable, no login, no user action; On your watchlist

Related CVEs

References

← Back to latest CVEs