Summary
A security update has been released for a third-party text editing utility to address multiple defects. The Ubuntu vulnerabilities affect internal recursion handling, bounds checking during string transformation of oversized inputs, filename handling in a bundled file browsing component, and input sanitization within an auto-completion feature. A local attacker able to supply a crafted file, or induce a user to open untrusted content, could cause a denial of service through memory corruption or potentially execute arbitrary code within the context of the affected process. The vendor has evaluated these issues against affected offerings and resolved them in the referenced maintenance release.
The following CVEs have been addressed:
CVE-2026-55693, CVE-2026-55895, CVE-2026-57455, and CVE-2026-57456.
Products not listed in the Impact Details section have not been evaluated. Furthermore, products that have exceeded any software maintenance time periods are also not evaluated and will not be published. Please consult End of Sale and End of Service Life - Extreme Networks for the EOL notices related to the product under question.
Products Potentially Affected
None
Impact Details
|
OS/Product
|
Exposure
|
|
ExtremeAnalytics for Site Engine
|
Yes
|
|
ExtremeCloud IQ - Site Engine (XIQ-SE)
|
Yes
|
|
ExtremeControl for Site Engine
|
Yes
|
Repair Recommendations
ExtremeAnalytics for Site Engine:
Fixed in 26.8.10 or later.
ExtremeCloud IQ - Site Engine (XIQ-SE):
Fixed in 26.8.10 or later.
ExtremeControl for Site Engine:
Fixed in 26.8.10 or later.
