CVE-2026-26094
Use of Hard-coded Cryptographic Key in Owl opds 2.2.0.4 allows Read Sensitive Constants Within an Executable via a crafted network request.
This issue allows Read Sensitive Constants Within an Executable via a crafted network request.
February 23, 2026
This issue affects: Owl opds v2.2.0.4
CVE-2026-26094
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
7.6
To fix this issue it's suggested to update to Talon v3.0
Luca Borzacchiello and Gabriele Quagliarella at Nozomi Networks
Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.
Learn more