https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:01:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323817 EUVD-2026-323817 https://cve.radiocsirt.org/vuln/euvd-2026-323817 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10294 <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10294 https://cve.radiocsirt.org/vuln/ghsa-9m6p-w8rp-5v54 <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-9m6p-w8rp-5v54 https://cve.radiocsirt.org/vuln/oesa-2026-2689 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: PackageKit, openEuler:24.03-LTS-SP3: PackageKit, openEuler:20.03-LTS-SP4: PackageKit, openEuler:22.03-LTS-SP4: PackageKit</p> <p>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fix(es):</p> <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.(CVE-2026-10294)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: PackageKit, openEuler:24.03-LTS-SP3: PackageKit, openEuler:20.03-LTS-SP4: PackageKit, openEuler:22.03-LTS-SP4: PackageKit</p> <p>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fix(es):</p> <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.(CVE-2026-10294)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2689 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11406-1 <p>PackageKit-1.3.6-1.1 on GA media</p> <p>PackageKit-1.3.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11406-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22860-1 <p>Security update for PackageKit</p> <p>Security update for PackageKit</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22860-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10294 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: packagekit, Ubuntu:Pro:18.04:LTS: packagekit, Ubuntu:Pro:20.04:LTS: packagekit, Ubuntu:22.04:LTS: packagekit, Ubuntu:24.04:LTS: packagekit, Ubuntu:25.10: packagekit, Ubuntu:26.04:LTS: packagekit</p> <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: packagekit, Ubuntu:Pro:18.04:LTS: packagekit, Ubuntu:Pro:20.04:LTS: packagekit, Ubuntu:22.04:LTS: packagekit, Ubuntu:24.04:LTS: packagekit, Ubuntu:25.10: packagekit, Ubuntu:26.04:LTS: packagekit</p> <p>A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10294 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2554 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in PackageKit ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in PackageKit ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2554