Vulnerabilidades de Firewalld
CVEs publicadas que afetam produtos de Firewalld: 1 registro(s), com severidade, exploração e correções.
CVE-2026-4948
Média · 5.5
CWE-279 27/03/2026
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.