{"id":"CVE-2026-111426","aliases":["DEBIAN-CVE-2026-111426","UBUNTU-CVE-2026-111426","openSUSE-SU-2026:12460-1"],"status":"published","title":"kdeconnect-kde-26.08.3-1.1 on GA media","description":"[Unknown description]","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-11-01T09:47:38.264859959Z","modified":"2026-11-08T06:00:06Z","fixes":[{"ecosystem":"Debian:14","package":"kdeconnect","fixed_in":["26.08.2-2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"kdeconnect-kde","fixed_in":["26.08.3-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.12.3-1","23.08.2-1","23.08.5-1","24.08.2-1","24.08.3-1","24.08.3-2","24.12.0-1","25.04.0+git20250504.28fb9142-1","25.04.0-1","25.04.2-1","25.08.1-1","25.11.80+git20251121.7090b106-1","25.12.3-1","26.04.0-1","26.04.3-1","26.04.3-2","26.08.2-1","26.08.2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.04.2-1","25.04.2-1+deb13u1","25.08.1-1","25.11.80+git20251121.7090b106-1","25.12.3-1","26.04.0-1","26.04.3-1","26.04.3-2","26.08.2-1","26.08.2-2"]},{"source":"osv","ecosystem":"Debian:14","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.08.2-2"}]}],"versions":["25.04.2-1","25.08.1-1","25.11.80+git20251121.7090b106-1","25.12.3-1","26.04.0-1","26.04.3-1","26.04.3-2","26.08.2-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.3-0ubuntu2","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.3.0-0ubuntu1","1.3.1-0ubuntu0.1","1.3.3-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.5-0ubuntu1","1.4-0ubuntu1","1.4-0ubuntu2","1.4-0ubuntu3","1.4-0ubuntu4","1.4-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.08.1-0ubuntu1","21.08.1-0ubuntu2","21.08.3-0ubuntu1","21.08.3-1ubuntu1","21.11.80-0ubuntu1","21.11.90-0ubuntu1","21.11.90-0ubuntu2","21.12.0-0ubuntu1","21.12.1-0ubuntu1","21.12.2-0ubuntu1","21.12.3-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["23.08.1-0ubuntu1","23.08.2-0ubuntu1","23.08.3-0ubuntu1","23.08.4-0ubuntu1","23.08.5-0ubuntu1","23.08.5-0ubuntu4","23.08.5-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.12.3-0ubuntu1","26.04.0-1ubuntu1","26.04.1-0ubuntu1","26.04.2-0ubuntu1","26.04.3-0ubuntu1","26.04.3-1ubuntu1","26.07.90-0ubuntu1","26.08.0-0ubuntu1","26.08.0-0ubuntu2","26.08.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"kdeconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.08.1-0ubuntu2","25.08.2-0ubuntu2","25.08.3-0ubuntu1","25.11.80-0ubuntu1","25.11.80-0ubuntu2","25.11.90-0ubuntu1","25.12.0-0ubuntu1","25.12.1-0ubuntu1","25.12.1-0ubuntu2","25.12.2-0ubuntu1","25.12.2-0ubuntu3","25.12.3-0ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kdeconnect-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.08.3-1.1"}]}]}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-111426","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-111426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-111426","tags":["report"]},{"url":"https://kde.org/info/security/advisory-20261030-2.txt","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-111426","tags":["web"]}],"sources":{"osv":[{"id":"DEBIAN-CVE-2026-111426","status":"published","published":"2026-11-01T09:47:38.264859959Z","modified":"2026-11-08T06:00:06.654992371Z","updated_at":"2026-11-08T06:31:21.6268Z"},{"id":"openSUSE-SU-2026:12460-1","title":"kdeconnect-kde-26.08.3-1.1 on GA media","description":"These are all security issues fixed in the kdeconnect-kde-26.08.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-06T00:00:00Z","modified":"2026-11-07T17:23:15.729391794Z","updated_at":"2026-11-07T17:50:39.727056Z"},{"id":"UBUNTU-CVE-2026-111426","description":"[Unknown description]","status":"published","published":"2026-11-03T00:00:00Z","modified":"2026-11-04T03:30:23.56190829Z","updated_at":"2026-11-04T03:56:39.110241Z"}]}}