A Note to our Customers and Partners in the Middle East
More Information
CVE-2026-26095
Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.
This issue allows File Manipulation via a crafted network request.
February 23, 2026
This issue affects Owl opds v2.2.0.4
CVE-2026-26095
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.5
To fix this issue it's suggested to update to Talon v3.0
Luca Borzacchiello and Gabriele Quagliarella at Nozomi Networks
Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.
Learn more
