A vulnerability was found in getsolus eopkg up to 4.3.x. It has been classified as problematic. This issue affects some unknown processing. The manipulation leads to missing support for integrity check.
This vulnerability is referenced as CVE-2026-21437. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is recommended.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-21437 | getsolus eopkg up to 4.3.x integrity check (GHSA-hjp7-qwrj-6cc6 / EUVD-2026-0024)
A vulnerability was found in getsolus eopkg up to 4.3.x. It has been classified as problematic. This issue affects some unknown processing. The manipulation…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-21437
Exploitation: none (Keine bekannte Ausnutzung)Automatable: no (Nicht automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-01-02T18:54:04.747435Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com