Presire Qsnapper vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Presire Qsnapper: 5 record(s), with affected versions and fixes.cpe:2.3:a:presire:qsnapper
CVE-2026-41049
High · 7.1
CWE-863 Jun 22, 2026
Caching of Authentication allows Authentication Bypass between users in qSnapper
Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authenticated for them.
CVE-2026-41048
High · 7.1
CWE-863 Jun 22, 2026
Caching of Authentication allows Authentication Bypass in qSnapper
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".
CVE-2026-41047
Medium · 5.5
CWE-306 Jun 22, 2026
Information leak via “diff” methods in qSnapper
Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information.
CVE-2026-41046
High · 7.3
CWE-23 Jun 22, 2026
path traversal via `config` parameter in qSnapper
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.
CVE-2026-41045
High · 7.0
CWE-367 Jun 22, 2026
Weak polkit authentication check in qSnapper
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.