CVE catalog

CVE-2026-45448

UBUNTU-CVE-2026-45448

[CVE catalog]

Severity
Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.17% · Oct 25, 2026

CWE-601 URL redirection to untrusted site ('open redirect')

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuntopngpro1.2.1+dfsg1-2ubuntu1vulnerable
Ubuntuntopngpro2.0+dfsg1-1vulnerable
Ubuntuntopngpro2.2+dfsg1-1vulnerable
Ubuntuntopngpro2.2+dfsg1-1build1vulnerable
Ubuntuntopngpro2.2+dfsg1-1ubuntu0.1~esm2vulnerable
Ubuntuntopngpro2.4+dfsg1-3vulnerable
Ubuntuntopngpro2.4+dfsg1-4vulnerable
Ubuntuntopngpro3.2+dfsg1-1vulnerable
Ubuntuntopngpro3.2+dfsg1-1ubuntu0.1~esm2vulnerable
Ubuntuntopng20.043.8+dfsg1-2.1build3vulnerable
Ubuntuntopng22.045.2.1+dfsg1-1vulnerable
Ubuntuntopng24.045.2.1+dfsg1-1vulnerable
Ubuntuntopng24.045.2.1+dfsg1-1ubuntu1vulnerable
Ubuntuntopng24.045.2.1+dfsg1-1ubuntu3vulnerable
Ubuntuntopng24.045.2.1+dfsg1-1ubuntu4vulnerable
Ubuntuntopng25.105.2.1+dfsg1-2ubuntu1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References