{"id":"UBUNTU-CVE-2026-111802","details":"(A flaw was found in Nautilus. When a removable drive or disk image is ...)","modified":"2026-10-23T10:35:55.422297545Z","published":"2026-10-23T00:00:00Z","upstream":["CVE-2026-111802"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-111802"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-111802"},{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/2179"}],"affected":[{"package":{"name":"nautilus","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.14.2-0ubuntu12","1:3.14.2-0ubuntu14","1:3.14.2-0ubuntu15","1:3.18.2-1ubuntu1","1:3.18.2-1ubuntu2","1:3.18.2-1ubuntu3","1:3.18.3-0ubuntu1","1:3.18.4-0ubuntu1","1:3.18.4-0ubuntu2","1:3.18.4.is.3.14.3-0ubuntu1","1:3.18.4.is.3.14.3-0ubuntu2","1:3.18.4.is.3.14.3-0ubuntu3","1:3.18.4.is.3.14.3-0ubuntu4","1:3.18.4.is.3.14.3-0ubuntu5","1:3.18.4.is.3.14.3-0ubuntu6"],"ecosystem_specific":{"binaries":[{"binary_name":"gir1.2-nautilus-3.0","binary_version":"1:3.18.4.is.3.14.3-0ubuntu6"},{"binary_name":"libnautilus-extension1a","binary_version":"1:3.18.4.is.3.14.3-0ubuntu6"},{"binary_name":"nautilus","binary_version":"1:3.18.4.is.3.14.3-0ubuntu6"},{"binary_name":"nautilus-data","binary_version":"1:3.18.4.is.3.14.3-0ubuntu6"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}},{"package":{"name":"nautilus","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.26.0-0ubuntu1","1:3.26.2-0ubuntu1","1:3.26.2-0ubuntu3.1","1:3.26.3-0ubuntu1","1:3.26.3-0ubuntu2","1:3.26.3-0ubuntu3","1:3.26.3-0ubuntu4","1:3.26.4-0~ubuntu18.04.1","1:3.26.4-0~ubuntu18.04.2","1:3.26.4-0~ubuntu18.04.3","1:3.26.4-0~ubuntu18.04.4","1:3.26.4-0~ubuntu18.04.5","1:3.26.4-0~ubuntu18.04.6"],"ecosystem_specific":{"binaries":[{"binary_name":"gir1.2-nautilus-3.0","binary_version":"1:3.26.4-0~ubuntu18.04.6"},{"binary_version":"1:3.26.4-0~ubuntu18.04.6","binary_name":"libnautilus-extension1a"},{"binary_version":"1:3.26.4-0~ubuntu18.04.6","binary_name":"nautilus"},{"binary_name":"nautilus-data","binary_version":"1:3.26.4-0~ubuntu18.04.6"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}},{"package":{"name":"nautilus","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.34.1-1ubuntu1","1:3.35.90-1ubuntu2","1:3.35.92-1ubuntu1","1:3.36.0-1ubuntu1","1:3.36.1-1ubuntu1","1:3.36.1.1-1ubuntu1","1:3.36.1.1-1ubuntu2","1:3.36.2-0ubuntu1","1:3.36.3-0ubuntu1","1:3.36.3-0ubuntu1.20.04.1","1:3.36.3-0ubuntu1.20.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"gir1.2-nautilus-3.0","binary_version":"1:3.36.3-0ubuntu1.20.04.2"},{"binary_name":"libnautilus-extension1a","binary_version":"1:3.36.3-0ubuntu1.20.04.2"},{"binary_version":"1:3.36.3-0ubuntu1.20.04.2","binary_name":"nautilus"},{"binary_name":"nautilus-data","binary_version":"1:3.36.3-0ubuntu1.20.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}},{"package":{"name":"nautilus","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:40.2-1ubuntu1","1:41.1-1ubuntu1","1:41.2-1ubuntu1","1:42~beta-1ubuntu1","1:42~rc-1ubuntu1","1:42.0-1ubuntu2","1:42.1.1-0ubuntu1","1:42.2-0ubuntu1","1:42.2-0ubuntu2","1:42.2-0ubuntu2.1","1:42.6-0ubuntu1","1:42.6-0ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"gir1.2-nautilus-3.0","binary_version":"1:42.6-0ubuntu2"},{"binary_version":"1:42.6-0ubuntu2","binary_name":"libnautilus-extension1a"},{"binary_name":"nautilus","binary_version":"1:42.6-0ubuntu2"},{"binary_version":"1:42.6-0ubuntu2","binary_name":"nautilus-data"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}},{"package":{"name":"nautilus","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:45~rc-1ubuntu1","1:45.2.1-4ubuntu1","1:46~beta-0ubuntu3","1:46.0-0ubuntu1","1:46.0-0ubuntu2","1:46.1-0ubuntu1","1:46.2-0ubuntu0.1","1:46.2-0ubuntu0.2","1:46.2-0ubuntu0.3","1:46.4-0ubuntu0.1","1:46.4-0ubuntu0.2"],"ecosystem_specific":{"binaries":[{"binary_version":"1:46.4-0ubuntu0.2","binary_name":"gir1.2-nautilus-4.0"},{"binary_version":"1:46.4-0ubuntu0.2","binary_name":"libnautilus-extension4"},{"binary_name":"nautilus","binary_version":"1:46.4-0ubuntu0.2"},{"binary_version":"1:46.4-0ubuntu0.2","binary_name":"nautilus-data"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}},{"package":{"name":"nautilus","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:50.0-0ubuntu2","1:50.1-2ubuntu1","1:50.1-2ubuntu2","1:51~alpha-0ubuntu1","1:51~rc-0ubuntu1","1:51.0.1-0ubuntu2","1:51.0.1-0ubuntu3"],"ecosystem_specific":{"binaries":[{"binary_version":"1:51.0.1-0ubuntu3","binary_name":"gir1.2-nautilus-4.1"},{"binary_name":"libnautilus-extension4","binary_version":"1:51.0.1-0ubuntu3"},{"binary_name":"nautilus","binary_version":"1:51.0.1-0ubuntu3"},{"binary_version":"1:51.0.1-0ubuntu3","binary_name":"nautilus-data"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}},{"package":{"name":"nautilus","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/nautilus?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:49.0-1ubuntu2","1:49.1-2ubuntu2","1:49.1-2ubuntu3","1:50~alpha-0ubuntu2","1:50~beta-0ubuntu1","1:50~rc-0ubuntu1","1:50.0-0ubuntu1","1:50.0-0ubuntu2","1:50.2.2-0ubuntu0.1","1:50.2.2-0ubuntu0.2"],"ecosystem_specific":{"binaries":[{"binary_version":"1:50.2.2-0ubuntu0.2","binary_name":"gir1.2-nautilus-4.1"},{"binary_name":"libnautilus-extension4","binary_version":"1:50.2.2-0ubuntu0.2"},{"binary_version":"1:50.2.2-0ubuntu0.2","binary_name":"nautilus"},{"binary_name":"nautilus-data","binary_version":"1:50.2.2-0ubuntu0.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111802.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}