CVE-2026-58054

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This CVE was assigned on the basis that the permission system allows a limited administrator to grant privileges exceeding their own authorization scope, potentially constituting an insecure default configuration. Following a dispute, the MITRE TL-Root determined the behavior reflects documented and intended product design rather than a security vulnerability.

Published

Jun 28, 2026

Last Modified

Jul 24, 2026

Status

Rejected

• CVE-2026-58049FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.…8.6
• CVE-2026-5805A weakness has been identified in code-projects Easy Blog Si…7.3
• CVE-2026-58050libssh2 through 1.11.1 reads an attacker-controlled 32-bit a…7.5
• CVE-2026-58051libssh2 through 1.11.1 grows its publickey list with SSH2_RE…8.3
• CVE-2026-580527-Zip for Windows through 26.01 fails to preserve the Mark-o…4.8
• CVE-2026-58053Gitea act_runner with the Docker backend (through act 0.262.…9.9
• CVE-2026-58055nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 …6.3
• CVE-2026-58056RustDesk gates incoming control messages on per-capability f…7.6
• CVE-2026-58057Flowise before 3.1.3 validates Custom MCP stdio environment …5
• CVE-2026-58058Nmap through 7.99 does not keep the IPv6 extension-header wa…6.9
• CVE-2026-58059In Bouncy Castle for Java before 1.85, Quadratic-time escapi…7.5
• CVE-2026-5806A security vulnerability has been detected in code-projects …3.5