AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-54231

MEDIUM · CVSS 5.5 EPSS 0.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-13 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.5. See the original NVD description below for full technical details.

CVE
CVE-2026-54231
Severity
MEDIUM
CVSS
5.5
EPSS
0.12%

Original NVD Description

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without sanitizing embedded control characters. A local user can inject arbitrary content into the journal output by embedding newline characters in syslog messages, controlling the content that root writes to dump directory files.

Related CVEs

Other vulnerabilities affecting the same vendor(s)