Critical Code Execution Vulnerability in Swish-e Affects Multiple Ubuntu Releases

Ubuntu

Critical Code Execution Vulnerability in Swish-e Affects Multiple Ubuntu Releases

First seen 7 May 2026, 11:13 UTC • •72.8

Article Content

1 / 5

Browse articles

ThreatCluster •May 8, 2026 at 11:08 UTC

•Critical vulnerability in Swish-e affects Ubuntu versions 26.04 to 16.04 LTS.
•Expat mishandling could lead to arbitrary code execution or application crashes.
•Users are urged to update systems to the latest package versions immediately.

A critical security vulnerability has been identified in Swish-e, affecting multiple versions of Ubuntu, including 26.04 LTS and earlier releases down to 16.04 LTS. The vulnerability, linked to Expat handling certain files, could allow attackers to execute arbitrary code or crash the application. This issue is tracked under CVE-2022-25235 and CVE-2022-25236, both published on 2022-02-16. Users are advised to update their systems to the latest package versions to mitigate the risk. The vulnerability impacts systems using Swish-e, a simple web indexing system. Ubuntu Pro users can access enhanced security coverage for these packages. A standard system update is recommended to address this issue. The advisory emphasizes the urgency of applying the patches to prevent potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 160d ago How this analysis works

Timeline

2022-02-16

CVE-2022-25235 published

CVE-2022-25235 was published, detailing a flaw in Expat used in Swish-e.

2022-02-16

CVE-2022-25236 published

CVE-2022-25236 was published, highlighting another vulnerability in Expat within Swish-e.

2026-05-07

Ubuntu security advisory USN-8240-1 released

Ubuntu published an advisory for Swish-e vulnerabilities, urging users to update their systems.

More articles in this cluster (4)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Organization (1)

Ubuntu

Vulnerability (2)

CVE-2022-25235
CVE-2022-25236

Affected Platform (1)

Ubuntu Pro

Relationships

CVE-2022-25235 targets Ubuntu Pro
CVE-2022-25236 targets Ubuntu Pro
Zero-day Exploit targets Ubuntu Pro
CVE-2022-25235 related to Ubuntu

Following this threat?

Track Ubuntu and CVE-2022-25235 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…

Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…