CVE-2026-110777

🎯 CVE-2026-110777 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-110777 | A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify whether the attachment originally came from the server or was added locally. This allows an attacker with access to a shared CalDAV calendar to exfiltrate arbitrary fil

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify whether the attachment originally came from the server or was added locally. This allows an attacker with access to a shared CalDAV calendar to exfiltrate arbitrary files the user has access to when interacting with malicious calendar events.

Klassifikation & Betroffenheit:

CWE-200 Gnome evolution-data-server 3.26 <3.62.1

Exposure of Sensitive Information to an Unauthorized Actor 🎯 High

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

🛡️ Empfohlene Mitigation: Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system de…

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-13 · Subverting Environment Variable Values (Very High) CAPEC-22 · Exploiting Trust in Client (High) CAPEC-116 · Excavation (Medium) CAPEC-169 · Footprinting (Very Low) CAPEC-224 · Fingerprinting (Very Low) CAPEC-285 · ICMP Echo Request Ping (Low) CAPEC-287 · TCP SYN Scan (Low) CAPEC-290 · Enumerate Mail Exchange (MX) Records (Low)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1562.003 · Impair Defenses:Impair Command His… T1574.006 · Hijack Execution Flow:Dynamic Link… T1574.007 · Hijack Execution Flow:Path Interce… T1217 · Browser Bookmark Discovery T1592 · Gather Victim Host Information T1595 · Active Scanning

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-105861 7.2 CVE-2026-100851 7.2 CVE-2025-61482 7.2 CVE-2020-16125 7.2 CVE-2026-105847 7.1

🩹 Patch verfügbar (OSV):

🩹 757672184698ec9f46cc16cf8860ec312d1e9d36 (Commit)

📰 Eigene Berichterstattung: ➔ CVE-2026-110777 | Red Hat Enterprise Linux up to 10 Attachment information discl

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 10/2026

Heute 21.10.

CVSS-Vektor-Analyse: 5.7

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Gering

UI · Interaktion Erforderlich

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Keine

A · Verfügbarkeit Keine

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CNA-Bewertung (redhat): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Veröffentlicht:14.10.2026

Aktualisiert:16.10.2026 09:47

Assigner (CNA):redhat

EUVD-ID:EUVD-2026-101521

CWE-200 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	726	0,2 %
≥50 %	3.223	0,9 %
≥10 %	22.086	5,9 %
<10 %	346.345	93,0 %

Tier

CVEs

Anteil

≥90 %

726

0,2 %

≥50 %

3.223

0,9 %

≥10 %

22.086

5,9 %

<10 %

346.345

93,0 %

Noch keine Analyse zu CVE-2026-110777

Beitrag zu CVE-2026-110777 verfassen

Zero-Day & Vulnerability Intelligence Hub