CVE Intelligence

Firewalld vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Firewalld products: 1 record(s), with severity, exploitation and fixes.

Firewalld 1

Exploited only (KEV) →

CVE-2026-4948 Medium · 5.5 CWE-279 Mar 27, 2026
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.