THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-4948 (MEDIUM 5.5) — A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper a

[NVD] CVE-2026-4948 (MEDIUM 5.5) — A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper a

lownvdPublished 2026-03-27

CVE-2026-4948 CVSS: 5.5 MEDIUM Published: 2026-03-27T06:16:39.543

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in net

Indicators of compromise

CVE-2026-4948cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4948