CVE-2026-110777
Last modified
CVE-2026-110777 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify whether the attachment originally came from the server or was added locally. This allows an attacker with access to a shared CalDAV calendar to exfiltrate arbitrary files the user has access to when interacting with malicious calendar events.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| GNOME | evolution-data-server | >= 3.26, < 3.62.1 |
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 6 | All versions |
| Red Hat | Red Hat Enterprise Linux 7 | All versions |
| Red Hat | Red Hat Enterprise Linux 8 | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-110777?
How severe is CVE-2026-110777?
How do I fix CVE-2026-110777?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-110770Databasus 3.7.0 through 3.61.0 contains an authentication by…8.1
- CVE-2026-110771Shopizer through 3.2.5 contains an authorization bypass vuln…4.3
- CVE-2026-110772Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authoriz…4.3
- CVE-2026-110773GrowChief through 0.3.0 contains a missing authorization vul…4.3
- CVE-2026-110774Blinko through 1.8.8 contains a broken access control vulner…5.3
- CVE-2026-110775Nexent through 2.7.0 contains a missing authorization vulner…6.5
- CVE-2026-11078Inappropriate implementation in FileSystem in Google Chrome …6.5
- CVE-2026-11079Insufficient validation of untrusted input in Codecs in Goog…8.8
- CVE-2026-1108A security vulnerability has been detected in cijliu librtsp…7.8
- CVE-2026-11080Use after free in WebView in Google Chrome on Android prior …8.8
- CVE-2026-110807A weakness has been identified in sgl-project SGLang up to 0…4.3
- CVE-2026-110809A security vulnerability has been detected in sgl-project SG…4.3
Are you affected by CVE-2026-110777?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST