Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2026-105517: NFS Ganesha may allow unauthorized access to files
CVE-2026-105517 · published 27 days ago
Summary
The NFS Ganesha packages from Canonical and Debian could let someone access shared files without permission. This could expose sensitive data or disrupt normal operations. Apply the latest security updates for these packages as soon as they are available and verify that only trusted users have access to NFS shares.
What to do
- Update debian nfs-ganesha to version 9.14-2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:18.04:LTS | canonical | nfs-ganesha | All versions |
| Ubuntu:20.04:LTS | canonical | nfs-ganesha | All versions |
| Ubuntu:22.04:LTS | canonical | nfs-ganesha | All versions |
| Ubuntu:24.04:LTS | canonical | nfs-ganesha | All versions |
| Ubuntu:26.04:LTS | canonical | nfs-ganesha | All versions |
| Debian:12 | debian | nfs-ganesha | All versions |
| Debian:14 | debian | nfs-ganesha |
< 9.14-2 Fix: upgrade to 9.14-2
|
Original advisory text
DEBIAN-CVE-2026-105517
[Unknown description]
References
- https://ubuntu.com/security/CVE-2026-105517 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-105517 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2545966 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-105517 Vendor Advisory
Timeline
Published9 Oct 2026
Updated17 Oct 2026
First seen9 Oct 2026
Track software like this
Free during beta