CVE-2026-94286 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
suse	CNA	7.1 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 10.29%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).

Vendor	Product	Version	Source
x	libxtst	𝑥 < 1.2.6	CNA

Debian Releases

Debian Product

Codename

libxtst

bookworm	postponed
forky	2:1.2.6-1 fixed
sid	2:1.2.6-1 fixed
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

libxtst

bionic	Fixed in 2:1.2.3-1ubuntu0.18.04.1~esm1 released
focal	Fixed in 2:1.2.3-1ubuntu0.20.04.1~esm1 released
jammy	Fixed in 2:1.2.3-1ubuntu0.22.04.1 released
noble	Fixed in 2:1.2.3-1.1ubuntu0.1 released
resolute	Fixed in 2:1.2.5-1ubuntu0.1 released
stonking	Fixed in 2:1.2.5-1ubuntu1 released
xenial	Fixed in 2:1.2.2-1ubuntu0.1~esm1 released

openSUSE / SLES Releases

openSUSE Product

Release

libXtst-devel

suse enterprise desktop 15 SP7	1.2.3-150000.3.3.1 fixed
suse enterprise sap 12 SP5	1.2.2-8.3.1 fixed
suse enterprise sap 15 SP4	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP5	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP6	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP7	1.2.3-150000.3.3.1 fixed
suse enterprise server 12 SP5	1.2.2-8.3.1 fixed
suse enterprise server 15 SP4	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP5	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP6	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP7	1.2.3-150000.3.3.1 fixed

libXtst6

suse enterprise desktop 15 SP7	1.2.3-150000.3.3.1 fixed
suse enterprise sap 12 SP5	1.2.2-8.3.1 fixed
suse enterprise sap 15 SP4	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP5	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP6	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP7	1.2.3-150000.3.3.1 fixed
suse enterprise server 12 SP3	1.2.2-8.3.1 fixed
suse enterprise server 12 SP5	1.2.2-8.3.1 fixed
suse enterprise server 15 SP4	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP5	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP6	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP7	1.2.3-150000.3.3.1 fixed

libXtst6-32bit

suse enterprise desktop 15 SP7	1.2.3-150000.3.3.1 fixed
suse enterprise sap 12 SP5	1.2.2-8.3.1 fixed
suse enterprise sap 15 SP4	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP5	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP6	1.2.3-150000.3.3.1 fixed
suse enterprise sap 15 SP7	1.2.3-150000.3.3.1 fixed
suse enterprise server 12 SP3	1.2.2-8.3.1 fixed
suse enterprise server 12 SP5	1.2.2-8.3.1 fixed
suse enterprise server 15 SP4	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP5	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP6	1.2.3-150000.3.3.1 fixed
suse enterprise server 15 SP7	1.2.3-150000.3.3.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

libXtst

RHEL 8	0:1.2.3-8.el8_10 fixed
RHEL 8.4 AUS	0:1.2.3-7.el8_4.1 fixed
RHEL 8.6 AUS	0:1.2.3-7.el8_6.1 fixed
RHEL 8.8 E4S	0:1.2.3-7.el8_8.1 fixed
RHEL 8.8 TUS	0:1.2.3-7.el8_8.1 fixed
RHEL 9	0:1.2.3-16.el9_9.1 fixed

libXtst-devel

RHEL 8	0:1.2.3-8.el8_10 fixed
RHEL 8.4 AUS	0:1.2.3-7.el8_4.1 fixed
RHEL 8.6 AUS	0:1.2.3-7.el8_6.1 fixed
RHEL 8.8 E4S	0:1.2.3-7.el8_8.1 fixed
RHEL 8.8 TUS	0:1.2.3-7.el8_8.1 fixed
RHEL 9	0:1.2.3-16.el9_9.1 fixed

Amazon Linux Releases

Amazon Package

Release

libXtst

Amazon Linux 2	0:1.2.3-1.amzn2.0.3 fixed
Amazon Linux 2023	0:1.2.5-1.amzn2023.0.2 fixed

libXtst-debuginfo

Amazon Linux 2	0:1.2.3-1.amzn2.0.3 fixed
Amazon Linux 2023	0:1.2.5-1.amzn2023.0.2 fixed

libXtst-debugsource

Amazon Linux 2023

0:1.2.5-1.amzn2023.0.2

fixed

libXtst-devel

Amazon Linux 2	0:1.2.3-1.amzn2.0.3 fixed
Amazon Linux 2023	0:1.2.5-1.amzn2023.0.2 fixed

Azure Linux Releases

Azure Package

Release

libXtst

Azure Linux 3.0

0:1.2.6-1.azl3

fixed

Common Weakness Enumeration

CWE-126 - Buffer Over-read
The software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Vulnerability Media Exposure

[GERMAN] Red Hat Enterprise Linux (libXi, libXrender, ansible-collection-redhat-leapp) und Red Hat Build of Apache Camel for Quarkus: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Red Hat Build of Apache Camel for Quarkus ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen sowie Daten offenzulegen oder zu manipulieren.
Published: 2026-10-27T23:00:00+00:00

References

https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10/diffs?commit_id=16023c86070e6af9407330deea3938fcef75815b