CVE-2026-44942

Medium

A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before…

suse·CWE-24·Published 2026-06-18

CVSS

6.5

EPSS

0.01

KEV

Exploits

Vendor statements (1)

suse.com

cve.orgen

241 chars

A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	ENISA EUVD	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2026-44942

Vendor statements (1)

CVSS metrics across sources