CVE catalog

CVE-2026-42095

DEBIAN-CVE-2026-42095

[CVE catalog]

Severity
Unknown · CVSS 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.16% · Oct 25, 2026

bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianarianna1325.04.0-1vulnerable
Debianarianna1325.12.3-1vulnerable
Debianarianna1325.12.3-2vulnerable
Debianarianna1326.04.0-1vulnerable
Debianarianna1425.04.0-1vulnerable
Debianarianna1425.12.3-1vulnerable
Debianarianna1425.12.3-2fixed
Opensuseariannatumbleweed26.04.0-2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianariannadeb1425.12.3-2Not reportedDEBIAN-CVE-2026-42095Not reported
Opensuseariannarpmtumbleweed26.04.0-2.1Not reportedOPENSUSE-SU-2026:10653-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [arianna]Affected
    Details (2)

    • 25.04.0-1 · amd64 · trixie

      Affected

      pypi · arianna · debian · 13

    • 25.04.0-1 · arm64 · trixie

      Affected

      pypi · arianna · debian · 13

[openSUSE Tumbleweed]

  • [arianna-lang]Unknown

    Source package: [arianna]

    Details (1)

    • 26.08.0-1.1 · noarch · tumbleweed

      Unknown · Fixed: 26.04.0-2.1

      Version impact unknown

      pypi · arianna · opensuse · tumbleweed

  • [arianna]Fixed

    Source package: [arianna]

    Details (1)

    • 26.08.0-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 26.04.0-2.1

      pypi · arianna · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]