A Note to our Customers and Partners in the Middle East
More Information
CVE-2026-26098
Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.
This issue allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.
February 23, 2026
This issue affects: Owl opds v2.2.0.4
CVE-2026-26098
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.4
To fix this issue it's suggested to update to Talon v3.0
Luca Borzacchiello and Gabriele Quagliarella at Nozomi Networks
Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.
Learn more
