Security Advisory

CVE-2026-5358

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-20 20:37:23

Last updated 2026-04-22 13:04:20

Assigner glibc

CVSS score not scored

State REJECTED

Description

REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug.

← Browse all CVEs View on cve.org ↗