CVE-2026-41049

概要

参考情報

• bugzilla.suse.com/show_bug.cgi · Third Party Advisory
• presire/qSnapper release v1.3.3 · Third Party Advisory
• security.opensuse.org/2026/05/26/qsnapper-dbus-issues.html · Vendor Advisory

qsnapper のその他の脆弱性

• CVE-2026-41048高 7.1Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functi…
• CVE-2026-41047中 5.5Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise r…
• CVE-2026-41046高 7.3A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious confi…
• CVE-2026-41045高 7.0A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentic…