{"id":"CVE-2026-10294","aliases":["DEBIAN-CVE-2026-10294","EUVD-2026-33818","GHSA-9m6p-w8rp-5v54","MGASA-2026-0411","OESA-2026-2689","SUSE-SU-2026:22860-1","SUSE-SU-2026:3404-1","SUSE-SU-2026:3405-1","UBUNTU-CVE-2026-10294","openSUSE-SU-2026:11406-1","openSUSE-SU-2026:21425-1"],"status":"published","title":"PackageKit API pk-transaction.c g_file_test improper authorization","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","severity":{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00222,"percentile":0.12879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-266","CWE-285"],"published":"2026-06-01T21:30:08Z","modified":"2026-10-28T02:30:49Z","fixes":[{"ecosystem":"Debian:14","package":"packagekit","fixed_in":["1.3.6-1"],"sources":["osv"]},{"ecosystem":"Mageia:10","package":"packagekit","fixed_in":["1.3.5-1.1.mga10"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"packagekit","fixed_in":["1.2.6-2.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"PackageKit","fixed_in":["1.2.8-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"PackageKit","fixed_in":["1.2.8-6.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"PackageKit","fixed_in":["1.1.12-12.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"PackageKit","fixed_in":["1.1.12-12.oe2203sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"PackageKit","fixed_in":["1.2.8-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"PackageKit","fixed_in":["1.2.8-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"PackageKit","fixed_in":["1.2.8-150600.4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"PackageKit","fixed_in":["1.2.8-150600.4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"PackageKit","fixed_in":["1.1.3-24.26.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"PackageKit","fixed_in":["1.3.6-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"PackageKit","fixed_in":["1.2.8-160000.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.6-5","1.2.6-5+deb12u1","1.2.7-1","1.2.8-1","1.2.8-2","1.3.0-1","1.3.0-2","1.3.0-3","1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3","1.3.5-1","1.3.6-1","1.4.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1","1.3.1-1+deb13u1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3","1.3.5-1","1.3.6-1","1.4.0-1"]},{"source":"osv","ecosystem":"Debian:14","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}],"versions":["1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3","1.3.5-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1.1.mga10"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-6.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-12.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-12.oe2203sp4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-150600.4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-150600.4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-24.26.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.17-4ubuntu6~gcc5.3","0.8.17-4ubuntu6~gcc5.4ubuntu1","0.8.17-4ubuntu6~gcc5.4ubuntu1.1","0.8.17-4ubuntu6~gcc5.4ubuntu1.2","0.8.17-4ubuntu6~gcc5.4ubuntu1.3","0.8.17-4ubuntu6~gcc5.4ubuntu1.4","0.8.17-4ubuntu6~gcc5.4ubuntu1.5","0.8.17-4ubuntu6~gcc5.4ubuntu1.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.7-1","1.1.9-1","1.1.9-1ubuntu1","1.1.9-1ubuntu2","1.1.9-1ubuntu2.18.04.1","1.1.9-1ubuntu2.18.04.3","1.1.9-1ubuntu2.18.04.4","1.1.9-1ubuntu2.18.04.5","1.1.9-1ubuntu2.18.04.6","1.1.9-1ubuntu2.18.04.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.12-5ubuntu4","1.1.13-1","1.1.13-2","1.1.13-2build1","1.1.13-2ubuntu1","1.1.13-2ubuntu1.1","1.1.13-2ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-2ubuntu3","1.2.4-1ubuntu1","1.2.4-1ubuntu2","1.2.5-1ubuntu1","1.2.5-2ubuntu1","1.2.5-2ubuntu2","1.2.5-2ubuntu3","1.2.5-2ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.7-1","1.2.8-1","1.2.8-1build1","1.2.8-2","1.2.8-2build2","1.2.8-2build3","1.2.8-2ubuntu1","1.2.8-2ubuntu1.1","1.2.8-2ubuntu1.2","1.2.8-2ubuntu1.4","1.2.8-2ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.0-3build1","1.3.1-1","1.3.1-1ubuntu1","1.3.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.4-3","1.3.5-1","1.3.5-1ubuntu1","1.3.6-1","1.3.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3","1.3.4-3ubuntu1","1.3.4-3ubuntu1.1","1.3.4-3ubuntu1.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-160000.5.1"}]}]}],"products":[{"vendor":"packagekit","product":"packagekit"}],"references":[{"url":"https://vuldb.com/vuln/367587","tags":["vdb-entry","technical-description","advisory","report"]},{"url":"https://vuldb.com/vuln/367587/cti","tags":["signature","permissions-required","report"]},{"url":"https://vuldb.com/cve/CVE-2026-10294","tags":["third-party-advisory","advisory","report"]},{"url":"https://vuldb.com/submit/826470","tags":["third-party-advisory","advisory","report"]},{"url":"https://github.com/PackageKit/PackageKit/issues/969","tags":["exploit","issue-tracking","report"]},{"url":"https://github.com/PackageKit/PackageKit/","tags":["product","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10294","tags":["advisory"]},{"url":"https://github.com/PackageKit/PackageKit"},{"url":"https://github.com/advisories/GHSA-9m6p-w8rp-5v54"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10294.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-10294","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0411.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36166","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/M6KYMZZSTVVP7SBKMB54MNOK7HGHQQN4/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2689","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622860-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263252","tags":["report"]},{"url":"https://bugzilla.suse.com/1267250","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10294","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263404-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263405-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-10294","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10294","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-10294","title":"PackageKit API pk-transaction.c g_file_test improper authorization","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-01T21:30:08.461Z","modified":"2026-06-02T12:31:04.692Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","level":"medium","assessor":"cna"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","level":"medium","assessor":"cna"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR","assessor":"cna"}],"cwes":["CWE-285","CWE-266"],"updated_at":"2026-11-02T13:40:01.309549Z"}],"euvd":[{"id":"EUVD-2026-33818","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-01T21:30:08Z","modified":"2026-06-02T12:31:04Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T18:20:56.977213Z"}],"ghsa":[{"id":"GHSA-9m6p-w8rp-5v54","title":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of...","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-02T00:31:57Z","modified":"2026-06-02T00:32:05Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-266"],"updated_at":"2026-11-02T15:08:28.115731Z"}],"nvd":[{"id":"CVE-2026-10294","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-01T22:16:24.657Z","modified":"2026-07-22T18:10:00.117Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-266","CWE-285"],"updated_at":"2026-11-02T14:12:21.635958Z"}],"osv":[{"id":"CVE-2026-10294","title":"PackageKit API pk-transaction.c g_file_test improper authorization","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-01T21:30:08.461Z","modified":"2026-10-28T02:30:49.431295688Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-266","CWE-285"],"updated_at":"2026-11-02T15:44:53.83521Z"},{"id":"DEBIAN-CVE-2026-10294","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-01T22:16:24.657Z","modified":"2026-10-01T03:01:01.255753487Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"updated_at":"2026-11-02T15:45:48.903138Z"},{"id":"OESA-2026-2689","title":"PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.(CVE-2026-10294)","status":"published","published":"2026-06-24T11:11:37Z","modified":"2026-08-18T01:20:05.972168951Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"UBUNTU-CVE-2026-10294","description":"A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2026-06-01T22:16:00Z","modified":"2026-10-17T12:57:57.758538267Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"MGASA-2026-0411","title":"Updated packagekit packages fix a security vulnerability","description":"PackageKit API pk-transaction.c g_file_test improper authorization.\n(CVE-2026-10294)\n","status":"published","published":"2026-09-16T15:40:01Z","modified":"2026-09-16T15:45:03.230968406Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11406-1","title":"PackageKit-1.3.6-1.1 on GA media","description":"These are all security issues fixed in the PackageKit-1.3.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-29T00:00:00Z","modified":"2026-07-30T17:15:06.989342985Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21425-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).\n\nNon security issue fixed:\n\n- KDE Discover ignores package locks (bsc#1263252).\n","status":"published","published":"2026-07-22T19:00:17Z","modified":"2026-07-24T17:16:09.830042145Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22860-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).\n\nNon security issue fixed:\n\n- KDE Discover ignores package locks (bsc#1263252).\n","status":"published","published":"2026-07-22T18:58:57Z","modified":"2026-07-28T18:24:10.854755708Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:3404-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\n- CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).\n","status":"published","published":"2026-07-29T10:59:44Z","modified":"2026-07-30T17:15:10.476772389Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3405-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issue:\n\n- CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization (bsc#1267250).\n","status":"published","published":"2026-07-29T10:59:53Z","modified":"2026-07-30T17:15:10.576387126Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}