Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Debian | debusine | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Wed, 10 Jun 2026 10:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Artifact Relationship Modification in Debusine | |
| Weaknesses | CWE-284 |
Wed, 10 Jun 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are organized into artifacts. The endpoints that create and delete relationships between artifacts enforced no permissions checks beyond being able to see the artifacts in question. | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: debian
Published:
Updated: 2026-06-10T09:12:30.625Z
Reserved: 2026-06-10T08:25:35.480Z
Link: CVE-2026-11852
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-06-10T10:16:31.350
Modified: 2026-06-10T10:16:31.350
Link: CVE-2026-11852
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-06-10T10:30:26Z