CVE-2026-104618
Last modified
CVE-2026-104618 is a medium-severity vulnerability rated 6.2/10 on the CVSS scale. On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| SUSE | SUSE Linux Enterprise Server 16.1 | ? |
| SUSE | SUSE Linux Enterprise Server for NVIDIA 16.1 | ? |
| SUSE | openSUSE Leap 16.1 | ? |
| openSUSE | Tumbleweed | >= ?, < 278458aeb7d8f995c0e3dc9d19d2dcba50795a42 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-104618?
How severe is CVE-2026-104618?
How do I fix CVE-2026-104618?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-104610A security vulnerability has been detected in Tenda HG7, HG9…10
- CVE-2026-104611A vulnerability was detected in Tenda AC9 15.03.02.13. Affec…9.1
- CVE-2026-104612A vulnerability was found in SourceCodester Student Result M…4.3
- CVE-2026-104613A vulnerability was determined in CodeAstro Simple Pharmacy …6.3
- CVE-2026-104614A vulnerability was identified in CodeAstro Simple Pharmacy …6.3
- CVE-2026-104617There are two invocations of `qrencode` to display a QR code…5.1
- CVE-2026-104625A security flaw has been discovered in CodeAstro Simple Loan…6.3
- CVE-2026-104626A user who can open a fork pull request can place workflow c…8.8
- CVE-2026-104628Satel Netco Design versions prior to v2.1.7 contains an inef…6.5
- CVE-2026-104629A component loading mechanism in openPDC and openHistorian w…8.8
- CVE-2026-104632Gitea Actions blocks the jobs of workflow runs from first-ti…8.8
- CVE-2026-104633When migrating a repository from another Gitea instance, Git…6.5
Are you affected by CVE-2026-104618?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST