CVE-2026-26099

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.

Score

CVSS 4.0 8.4 High

Status

Analyzed - prodsec@nozominetworks.com

Published

2026-02-20

Last modified

2026-02-20

Weaknesses

CWE-427

Affected products

• Opds (Owl)
• Opds-talon (Owlcyberdefense)

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26099