https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:01:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:53435 <p><strong>Affected:</strong> AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks2: udisks2: Local Privilege Escalation via as-user option spoofing (CVE-2026-7867)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks2: udisks2: Local Privilege Escalation via as-user option spoofing (CVE-2026-7867)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:53435 https://cve.radiocsirt.org/vuln/bdu:2026-14235 bdu:2026-14235 https://cve.radiocsirt.org/vuln/bdu:2026-14235 https://cve.radiocsirt.org/vuln/euvd-2026-364427 EUVD-2026-364427 https://cve.radiocsirt.org/vuln/euvd-2026-364427 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7867 <p>A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the &#39;as-user&#39; option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the &#39;as-user&#39; parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.</p> <p>A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the &#39;as-user&#39; option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the &#39;as-user&#39; parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-7867 https://cve.radiocsirt.org/vuln/oesa-2026-3460 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: udisks2</p> <p>The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fix(es):</p> <p>A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the &amp;apos;as-user&amp;apos; option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the &amp;apos;as-user&amp;apos; parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.(CVE-2026-7867)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: udisks2</p> <p>The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fix(es):</p> <p>A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the &amp;apos;as-user&amp;apos; option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the &amp;apos;as-user&amp;apos; parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.(CVE-2026-7867)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3460 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11501-1 <p>libudisks2-0-2.11.2-1.1 on GA media</p> <p>libudisks2-0-2.11.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11501-1 https://cve.radiocsirt.org/vuln/rhsa-2026:64798 <p>udisks2: udisks2: Local Privilege Escalation via as-user option spoofing</p> <p>udisks2: udisks2: Local Privilege Escalation via as-user option spoofing</p> https://cve.radiocsirt.org/vuln/rhsa-2026:64798 https://cve.radiocsirt.org/vuln/rlsa-2026:53435 <p><strong>Affected:</strong> Rocky Linux:10: udisks2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks2: udisks2: Local Privilege Escalation via as-user option spoofing (CVE-2026-7867)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: udisks2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks2: udisks2: Local Privilege Escalation via as-user option spoofing (CVE-2026-7867)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:53435 https://cve.radiocsirt.org/vuln/suse-su-2026:23405-1 <p>Security update for udisks2</p> <p>Security update for udisks2</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23405-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-7867 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: udisks2, Ubuntu:26.04:LTS: udisks2</p> <p>A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the &#39;as-user&#39; option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the &#39;as-user&#39; parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: udisks2, Ubuntu:26.04:LTS: udisks2</p> <p>A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the &#39;as-user&#39; option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the &#39;as-user&#39; parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-7867 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2760 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2760