https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:54:36.160024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291429 EUVD-2026-291429 2026-10-03T21:54:36.279890+00:00 EUVD-2026-291429 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40354 fkie_cve-2026-40354 2026-10-03T21:54:36.279928+00:00

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

 https://cve.radiocsirt.org/vuln/ghsa-v5fw-rcv7-v6f3 GHSA-v5fw-rcv7-v6f3 2026-10-03T21:54:36.279976+00:00

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

 https://cve.radiocsirt.org/vuln/oesa-2026-2182 OESA-2026-2182 — xdg-desktop-portal security update 2026-10-03T21:54:36.279995+00:00

Affected: openEuler:24.03-LTS-SP1: xdg-desktop-portal

xdg-desktop-portal works by exposing a series of D-Bus interfaces known as portals under a well-known name (org.freedesktop.portal.Desktop) and object path (/org/freedesktop/portal/desktop). The portal interfaces include APIs for file access, opening URIs, printing and others. Security Fix(es):

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.(CVE-2026-40354)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40354 UBUNTU-CVE-2026-40354 2026-10-03T21:54:36.280020+00:00

Affected: Ubuntu:16.04:LTS: xdg-desktop-portal, Ubuntu:18.04:LTS: xdg-desktop-portal, Ubuntu:20.04:LTS: xdg-desktop-portal, Ubuntu:22.04:LTS: xdg-desktop-portal, Ubuntu:24.04:LTS: xdg-desktop-portal, Ubuntu:25.10: xdg-desktop-portal

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.