https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:55:04 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:67585 <p><strong>Affected:</strong> AlmaLinux:9: firewall-applet, AlmaLinux:9: firewall-config, AlmaLinux:9: firewalld, AlmaLinux:9: firewalld-filesystem, AlmaLinux:9: python3-firewall</p> <p>firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.</p> <p>Security Fix(es):</p> <p>* firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: firewall-applet, AlmaLinux:9: firewall-config, AlmaLinux:9: firewalld, AlmaLinux:9: firewalld-filesystem, AlmaLinux:9: python3-firewall</p> <p>firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.</p> <p>Security Fix(es):</p> <p>* firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:67585 https://cve.radiocsirt.org/vuln/bdu:2026-11373 bdu:2026-11373 https://cve.radiocsirt.org/vuln/bdu:2026-11373 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0558 certfr-2026-avi-0558 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0558 https://cve.radiocsirt.org/vuln/euvd-2026-369298 EUVD-2026-369298 https://cve.radiocsirt.org/vuln/euvd-2026-369298 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4948 <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.</p> <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4948 https://cve.radiocsirt.org/vuln/ghsa-mxjh-5564-f256 <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.</p> <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.</p> https://cve.radiocsirt.org/vuln/ghsa-mxjh-5564-f256 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4948 msrc_CVE-2026-4948 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4948 https://cve.radiocsirt.org/vuln/oesa-2026-1855 <p><strong>Affected:</strong> openEuler:24.03-LTS: firewalld</p> <p>firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es):</p> <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: firewalld</p> <p>firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es):</p> <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1855 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11289-1 <p>firewall-applet-2.3.2-2.1 on GA media</p> <p>firewall-applet-2.3.2-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11289-1 https://cve.radiocsirt.org/vuln/rhsa-2026:67843 <p>firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization</p> <p>firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization</p> https://cve.radiocsirt.org/vuln/rhsa-2026:67843 https://cve.radiocsirt.org/vuln/rlba-2026:28238 <p><strong>Affected:</strong> Rocky Linux:10: firewalld</p> <p>firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.</p> <p>Bug Fix(es) and Enhancement(s):</p> <p>* firewalld: package upgrade may cause running firewalld to reports errors (JIRA:Rocky Linux-137602)</p> <p>* [10.3] Firewalld rebase to latest upstream stable (JIRA:Rocky Linux-174658)</p> <p>* Firewalld --timeout argument does not work for policies (JIRA:Rocky Linux-95705)</p> <p><strong>Affected:</strong> Rocky Linux:10: firewalld</p> <p>firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.</p> <p>Bug Fix(es) and Enhancement(s):</p> <p>* firewalld: package upgrade may cause running firewalld to reports errors (JIRA:Rocky Linux-137602)</p> <p>* [10.3] Firewalld rebase to latest upstream stable (JIRA:Rocky Linux-174658)</p> <p>* Firewalld --timeout argument does not work for policies (JIRA:Rocky Linux-95705)</p> https://cve.radiocsirt.org/vuln/rlba-2026:28238 https://cve.radiocsirt.org/vuln/suse-su-2026:21418-1 <p>Security update for firewalld</p> <p>Security update for firewalld</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21418-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4948 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firewalld, Ubuntu:18.04:LTS: firewalld, Ubuntu:20.04:LTS: firewalld, Ubuntu:22.04:LTS: firewalld, Ubuntu:24.04:LTS: firewalld, Ubuntu:25.10: firewalld, Ubuntu:26.04:LTS: firewalld</p> <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firewalld, Ubuntu:18.04:LTS: firewalld, Ubuntu:20.04:LTS: firewalld, Ubuntu:22.04:LTS: firewalld, Ubuntu:24.04:LTS: firewalld, Ubuntu:25.10: firewalld, Ubuntu:26.04:LTS: firewalld</p> <p>A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4948 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3382 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, einschließlich der Ausführung von Code mit Root-Rechten, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, einschließlich der Ausführung von Code mit Root-Rechten, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3382