Changeflow GovPing Data Privacy & Cybersecurity GNU Libc Critical Vulnerabilities, 9.8 CVSS Score
Urgent Notice Added Final

GNU Libc Critical Vulnerabilities, 9.8 CVSS Score

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published
Detected
Email

Summary

CERT-Bund has issued a security advisory (WID-SEC-2026-1190) warning of multiple critical vulnerabilities in GNU libc 2.43. The vulnerabilities carry a CVSS Base Score of 9.8 (critical) and a Temporal Score of 9.0. Remote, unauthenticated attackers can exploit the flaws to manipulate files, cause denial of service, or conduct other unspecified attacks. No mitigation measures are currently available.

“Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.”

Published by CERT-Bund on wid.cert-bund.de . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

What changed

CERT-Bund published security advisory WID-SEC-2026-1190 disclosing multiple critical vulnerabilities in GNU libc 2.43, a foundational C library used in Linux and other UNIX-based operating systems. The CVSS Base Score of 9.8 and Temporal Score of 9.0 reflect the highest severity classification, with confirmed remote exploitability and no available workaround at the time of publication.

Organizations running GNU libc on UNIX or Linux systems should monitor for vendor patches and security updates from their distribution maintainers. The absence of mitigation means that once patches are released, priority deployment will be critical given the remote exploitability and severity of potential consequences including file manipulation and denial of service.

Archived snapshot

Apr 21, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

[WID-SEC-2026-1190] GNU libc: Mehrere Schwachstellen CVSS Base Score 9.8 (kritisch) CVSS Temporal Score 9.0 (kritisch) Remoteangriff ja Datum 20.04.2026 Stand 21.04.2026 Mitigation nein

Betroffene Systeme

Betriebssystem

  • UNIX

Produktbeschreibung

Die GNU libc ist die Basis C Bibliothek unter Linux sowie anderen Unix-Betriebssystemen, welche die Systemaufrufe sowie Basisfunktionalität bereitstellt.

Produkte

20.04.2026
- Open Source GNU libc 2.43

Angriff

Angriff

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Get daily alerts for CERT-Bund Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
CERT-Bund
Published
April 20th, 2026
Instrument
Notice
Branch
Executive
Source language
de
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Technology companies Government agencies Manufacturers
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Security advisory System patching
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Data Privacy Product Safety

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!