Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-41049

Caching of Authentication allows Authentication Bypass between users in qSnapper

Incorrect caching of authentication between different users of the  qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authenticated for them.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Presire
Products
Qsnapper
CVE-2026-41048

Caching of Authentication allows Authentication Bypass in qSnapper

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Presire
Products
Qsnapper
CVE-2026-41045

Weak polkit authentication check in qSnapper

A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Presire
Products
Qsnapper
CVE-2026-41046

path traversal via `config` parameter in qSnapper

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Presire
Products
Qsnapper
CVE-2026-41047

Information leak via “diff” methods in qSnapper

Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Presire
Products
Qsnapper