Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-4948

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Firewalld Redhat
Products
Firewalld Enterprise Linux Enterprise Linux Eus and 5 more
CVE-2016-5410

firewalld: Firewall configuration can be modified by any logged in user

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Firewalld Redhat
Products
Firewalld Enterprise Linux Enterprise Linux Desktop and 3 more