CVE-2026-45553

Description

NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

Overview

State

—

Assigner (CNA)

—

CVSS severity

high

CVSS score

7.5 / 10

CVSS vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Effective score

7.5 / 10 HIGH source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2026-45553

Linked Threat

CVE-2026-45553 — CVE-2026-45553

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2026-33963

EUVD enrichment is queued; refresh the page in a few seconds.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (5)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://www.first.org/epss/ tenable:www.first.org
• https://github.com/zauberzeug/nicegui/releases/tag/v3.12.0 tenable:github.com
• https://github.com/zauberzeug/nicegui/security/advisories/GHSA-jfrm-rx66-g536 tenable:github.com
• https://nvd.nist.gov/vuln/detail/CVE-2026-45553 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2026-45553 tenable:www.cve.org

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Microsoft and Adobe Patch Tuesday, April 2026 Security Update Review
  web:blog.qualys.com

  With Qualys Policy Audit's out-of-the-box mitigation or Compensatory Controls, which reduce the risk of a vulnerability being exploited because the remediation ( fix / patch ) cannot be done immediately, these security controls are not recommended by any industry standards, such as CIS and DISA-STIG.

  2026-05-26 02:57 UTC
• Oracle Database Patch Maintenance
  web:docs.oracle.com

  Discover how reactive patch maintenance differs from proactive patch maintenance.

  2026-05-26 02:57 UTC
• CVE-2026-45553 | Security Details | Sonatype Guide
  web:guide.sonatype.com

  Technical security analysis for CVE-2026-45553 . CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings.

  2026-05-26 02:57 UTC
• Patching : Find the Required Patches for Oracle Products
  web:oracle-base.com

  The OPatch utility doesn't let you re-apply a patch already present, so it's quite easy to simplify the process by having a very similar process each quarter. Once I've got all the patches, I write a patching script for each product. For the database this includes OPatch and the latest database patches.

  2026-05-26 02:57 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-26 02:57 UTC
• Microsoft Issues Second Biggest Patch Tuesday Ever in April
  web:redmondmag.com

  Microsoft April 2026 Patch Tuesday fixed 163 CVEs , marking its second-largest security update. Three zero-day vulnerabilities impacted SharePoint, Chromium-based Edge workflows and Microsoft Defender.

  2026-05-26 02:57 UTC
• April 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
  web:www.crowdstrike.com

  Microsoft's April 2026 Patch Tuesday addresses 164 CVEs , featuring 8 Critical vulnerabilities, one exploited zero-day, and one disclosed zero-day.

  2026-05-26 02:57 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-26 02:57 UTC
• Is Vulnerability Mitigation Just Patching? Or Patching and Beyond ...
  web:www.secpod.com

  Mitigation , on the other hand, is the process of eradicating risk. It includes patching and other means of risk remediation . Examples could be workarounds, security controls, isolation, or even physical replacement of assets. So, have you been patching or mitigating? Why is Patching Not Enough?

  2026-05-26 02:57 UTC
• Oracle April 2026 Critical Patch Update 241 CVEs | Tenable®
  web:www.tenable.com

  Oracle addresses 241 CVEs in its April Critical Patch Update, the second quarterly update of 2026 with 481 patches, including 34 critical updates.

  2026-05-26 02:57 UTC

Only Available for Registered Users. Sign in to view.