Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-4948

Опубликовано: 02 мая 2026
Источник: msrc
CVSS3: 5.5
EPSS Низкий

Описание

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

EPSS

Процентиль: 2%
0.00118
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS3: 5.5
redhat
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS3: 5.5
nvd
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS3: 5.5
debian
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit t ...

suse-cvrf
около 1 месяца назад

Security update for firewalld

EPSS

Процентиль: 2%
0.00118
Низкий

5.5 Medium

CVSS3