Vulnerability Bulletins

CVE-2026-123962

   
Affected software LINUX DEBIAN
 
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-123962