https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:13:23.004558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:67585 ALSA-2026:67585 — Moderate: firewalld security update 2026-10-03T03:13:23.416191+00:00

Affected: AlmaLinux:9: firewall-applet, AlmaLinux:9: firewall-config, AlmaLinux:9: firewalld, AlmaLinux:9: firewalld-filesystem, AlmaLinux:9: python3-firewall

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

Security Fix(es):

* firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-11373 bdu:2026-11373 2026-10-03T03:13:23.416261+00:00 bdu:2026-11373 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0558 certfr-2026-avi-0558 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-03T03:13:23.416278+00:00 certfr-2026-avi-0558 https://cve.radiocsirt.org/vuln/euvd-2026-369298 EUVD-2026-369298 2026-10-03T03:13:23.416295+00:00 EUVD-2026-369298 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4948 fkie_cve-2026-4948 2026-10-03T03:13:23.416307+00:00

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

 https://cve.radiocsirt.org/vuln/ghsa-mxjh-5564-f256 GHSA-mxjh-5564-f256 2026-10-03T03:13:23.416330+00:00

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4948 msrc_CVE-2026-4948 — Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization 2026-10-03T03:13:23.416346+00:00 msrc_CVE-2026-4948 https://cve.radiocsirt.org/vuln/oesa-2026-1855 OESA-2026-1855 — firewalld security update 2026-10-03T03:13:23.416363+00:00

Affected: openEuler:24.03-LTS: firewalld

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es):

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11289-1 openSUSE-SU-2026:11289-1 — firewall-applet-2.3.2-2.1 on GA media 2026-10-03T03:13:23.416387+00:00

firewall-applet-2.3.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:67843 RHSA-2026:67843 — Red Hat Security Advisory: firewalld security update 2026-10-03T03:13:23.416402+00:00

firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization

 https://cve.radiocsirt.org/vuln/rlba-2026:28238 RLBA-2026:28238 — Moderate:firewalld bug fix and enhancement update 2026-10-03T03:13:23.416416+00:00

Affected: Rocky Linux:10: firewalld

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

Bug Fix(es) and Enhancement(s):

* firewalld: package upgrade may cause running firewalld to reports errors (JIRA:Rocky Linux-137602)

* [10.3] Firewalld rebase to latest upstream stable (JIRA:Rocky Linux-174658)

* Firewalld --timeout argument does not work for policies (JIRA:Rocky Linux-95705)

 https://cve.radiocsirt.org/vuln/suse-su-2026:21418-1 SUSE-SU-2026:21418-1 — Security update for firewalld 2026-10-03T03:13:23.416438+00:00

Security update for firewalld

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4948 UBUNTU-CVE-2026-4948 2026-10-03T03:13:23.416452+00:00

Affected: Ubuntu:16.04:LTS: firewalld, Ubuntu:18.04:LTS: firewalld, Ubuntu:20.04:LTS: firewalld, Ubuntu:22.04:LTS: firewalld, Ubuntu:24.04:LTS: firewalld, Ubuntu:25.10: firewalld, Ubuntu:26.04:LTS: firewalld

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3382 WID-SEC-W-2026-3382 — Red Hat Enterprise Linux (firewalld, leapp-repository, tesseract): Mehrere Schwachstellen 2026-10-03T03:13:23.416480+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, einschließlich der Ausführung von Code mit Root-Rechten, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.