CVE-2026-58293
High
Published: 03 July 2026
Published
03 July 2026
Modified
03 July 2026
KEV Added
—
Patch
—
CVSS Score v3.1
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
N/A
Summary
CVE-2026-58293 is a high-severity External Control of File Name or Path (CWE-73) vulnerability. Its CVSS base score is 8.1 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-41589
Vulnerability details
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- CWE(s)
Related Threats
CVEs Like This One
CVE-2019-25472Shared CWE-73
CVE-2024-8616Shared CWE-73
CVE-2025-24054Shared CWE-73
CVE-2025-0105Shared CWE-73
CVE-2025-0211Shared CWE-73
CVE-2025-6463Shared CWE-73
CVE-2021-24966Shared CWE-73
CVE-2024-11838Shared CWE-73
CVE-2024-1603Shared CWE-73
CVE-2025-0124Shared CWE-73
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
addresses: CWE-73
Rejects externally supplied file or resource identifiers that fail validity checks.