{"id":"CVE-2026-4948","aliases":["ALSA-2026:67585","AZL-85335","CLSA-2026-1778887961","CLSA-2026-1779124021","DEBIAN-CVE-2026-4948","EUVD-2026-16557","GHSA-mxjh-5564-f256","OESA-2026-1855","OESA-2026-1856","OESA-2026-1857","OESA-2026-1858","OESA-2026-1859","RHBA-2026:28238","RHSA-2026:67585","RHSA-2026:67843","RHSA-2026:76844","RLSA-2026:67585","SUSE-SU-2026:1872-1","SUSE-SU-2026:21418-1","SUSE-SU-2026:22060-1","SUSE-SU-2026:22263-1","SUSE-SU-2026:22343-1","SUSE-SU-2026:2302-1","SUSE-SU-2026:2745-1","UBUNTU-CVE-2026-4948","openSUSE-SU-2026:11289-1","openSUSE-SU-2026:21032-1"],"status":"published","title":"Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00126,"percentile":0.02299,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-279"],"published":"2026-03-27T05:30:23Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"firewall-applet","fixed_in":["1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"firewall-config","fixed_in":["1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"firewalld","fixed_in":["1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"firewalld-filesystem","fixed_in":["1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-firewall","fixed_in":["1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"firewalld","fixed_in":["2.0.2-4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewall-applet","fixed_in":["1.2.1-1.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewall-config","fixed_in":["1.2.1-1.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewalld","fixed_in":["1.2.1-1.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewalld-filesystem","fixed_in":["1.2.1-1.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-firewall","fixed_in":["1.2.1-1.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewall-applet","fixed_in":["1.3.4-15.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewall-config","fixed_in":["1.3.4-15.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewalld","fixed_in":["1.3.4-15.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewalld-filesystem","fixed_in":["1.3.4-15.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-firewall","fixed_in":["1.3.4-15.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"firewalld","fixed_in":["1.3.3-1~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firewalld","fixed_in":["2.3.1-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firewalld","fixed_in":["2.4.0-2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"firewalld","fixed_in":["1.2.6-8.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"firewalld","fixed_in":["1.2.6-9.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"firewalld","fixed_in":["1.2.6-9.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"firewalld","fixed_in":["1.2.6-9.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"firewalld","fixed_in":["1.0.2-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewall-applet","fixed_in":["0:2.4.2-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewall-config","fixed_in":["0:2.4.2-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewalld","fixed_in":["0:2.4.2-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewalld-filesystem","fixed_in":["0:2.4.2-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-firewall","fixed_in":["0:2.4.2-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firewall-applet","fixed_in":["0:1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firewall-config","fixed_in":["0:1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"firewalld","fixed_in":["0:1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"firewalld-filesystem","fixed_in":["0:1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-firewall","fixed_in":["0:1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewall-applet","fixed_in":["0:2.3.1-1.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewall-config","fixed_in":["0:2.3.1-1.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewalld","fixed_in":["0:2.3.1-1.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewalld-filesystem","fixed_in":["0:2.3.1-1.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-firewall","fixed_in":["0:2.3.1-1.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firewall-applet","fixed_in":["0:1.3.4-15.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firewall-config","fixed_in":["0:1.3.4-15.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"firewalld","fixed_in":["0:1.3.4-15.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"firewalld-filesystem","fixed_in":["0:1.3.4-15.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"python3-firewall","fixed_in":["0:1.3.4-15.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"firewalld","fixed_in":["0:1.3.4-20.el9_8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"rpcbind","fixed_in":["1.2.9-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"firewalld","fixed_in":["2.0.0-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"firewalld","fixed_in":["2.1.2-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"firewalld","fixed_in":["2.1.2-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"firewalld","fixed_in":["2.1.2-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"firewalld","fixed_in":["1.3.4-150600.13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"firewalld","fixed_in":["1.3.4-150600.13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"firewalld","fixed_in":["1.3.4-150600.13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"firewalld","fixed_in":["1.3.4-150600.13.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"firewalld","fixed_in":["2.3.2-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"firewalld","fixed_in":["2.1.2-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2-4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-15.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-15.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-15.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-15.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-15.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1~deb12u2"}]}],"versions":["1.3.0-1","1.3.1-1","1.3.2-1","1.3.3-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1+deb13u1"}]}],"versions":["2.3.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-2"}]}],"versions":["2.3.1-1","2.3.1-2","2.3.1-3","2.4.0-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-8.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-9.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-9.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-9.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firewall-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-15.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firewall-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-15.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-15.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"firewalld-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-15.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"python3-firewall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-15.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-20.el9_8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"rpcbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-150600.13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-150600.13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-150600.13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-150600.13.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.13-1","0.3.14.2-1","0.3.14.2-2","0.4.0-1","0.4.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.4.5-2","0.4.4.6-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.1-1ubuntu9","0.7.2-1","0.8.0-1","0.8.0-2","0.8.1-1","0.8.2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.3-2ubuntu1","1.0.1-2ubuntu4","1.0.2-1ubuntu1","1.0.3-1ubuntu2","1.1.0-1ubuntu1","1.1.0-1ubuntu3","1.1.0-1ubuntu4","1.1.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3-1","2.0.1-1","2.0.1-2","2.0.2-1","2.1.0-1","2.1.1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.0-2","2.3.0-3","2.3.0-4","2.3.1-1","2.3.1-2","2.3.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1-3","2.5.0-1","2.5.1-1","2.5.1-2","2.5.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1-2ubuntu1","2.3.1-3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"firewalld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-160000.3.1"}]}]}],"products":[{"vendor":"firewalld","product":"firewalld"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2026:28238","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67585","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67843","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76844","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4948","tags":["vdb-entry","x_refsource_REDHAT","Mitigation","Vendor Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452086","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/05/msg00029.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4948","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mxjh-5564-f256"},{"url":"https://bugzilla.redhat.com/2452086","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-67585.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778887961.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779124021.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4948","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1855","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1856","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1857","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1858","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1859","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-137602","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-174658","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-95705","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_28238.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4948","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67585.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67843.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76844.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:67585","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261872-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1260903","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4948","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621418-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622060-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622263-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622343-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262302-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262745-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-4948","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-4948","title":"Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T05:30:23.632Z","modified":"2026-11-05T21:17:38.034Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-279"],"updated_at":"2026-11-05T22:55:20.139479Z"}],"euvd":[{"id":"EUVD-2026-16557","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T05:30:23Z","modified":"2026-11-05T21:17:38Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-05T22:02:08.543452Z"}],"ghsa":[{"id":"GHSA-mxjh-5564-f256","title":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis...","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T06:31:44Z","modified":"2026-10-06T18:32:18Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-279"],"updated_at":"2026-11-02T15:12:51.459076Z"}],"nvd":[{"id":"CVE-2026-4948","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T06:16:39.543Z","modified":"2026-11-05T22:18:45.51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-279"],"updated_at":"2026-11-05T23:57:17.922269Z"}],"osv":[{"id":"DEBIAN-CVE-2026-4948","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T06:16:39.543Z","modified":"2026-10-27T09:47:30.77331894Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:56.444225Z"},{"id":"OESA-2026-1855","title":"firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)","status":"published","published":"2026-04-11T11:10:52Z","modified":"2026-08-18T01:19:46.90944399Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1856","title":"firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)","status":"published","published":"2026-04-11T11:10:52Z","modified":"2026-08-18T01:19:46.937564182Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1857","title":"firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)","status":"published","published":"2026-04-11T11:10:52Z","modified":"2026-08-18T01:19:46.805349473Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1858","title":"firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)","status":"published","published":"2026-04-11T11:10:52Z","modified":"2026-08-18T01:19:46.91409834Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1859","title":"firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.(CVE-2026-4948)","status":"published","published":"2026-04-11T11:10:52Z","modified":"2026-08-18T01:19:46.974734553Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHBA-2026:28238","title":"Red Hat Bug Fix Advisory: firewalld bug fix and enhancement update","status":"published","published":"2026-07-30T10:08:24Z","modified":"2026-10-07T10:04:46Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2026:67585","title":"Red Hat Security Advisory: firewalld security update","status":"published","published":"2026-09-16T10:14:53Z","modified":"2026-10-07T10:17:33Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67843","title":"Red Hat Security Advisory: firewalld security update","status":"published","published":"2026-09-17T10:17:59Z","modified":"2026-10-07T10:17:37Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:76844","title":"Red Hat Security Advisory: firewalld security update","status":"published","published":"2026-10-07T10:20:15Z","modified":"2026-10-07T10:32:34.518633001Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:67585","title":"Moderate: firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.\n\nSecurity Fix(es):\n\n* firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-17T06:06:39.358579Z","modified":"2026-09-17T06:30:02.480955181Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-4948","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T06:16:00Z","modified":"2026-10-17T12:58:57.328128428Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:33.391918Z"},{"id":"ALSA-2026:67585","title":"Moderate: firewalld security update","description":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.  \n\nSecurity Fix(es):  \n\n  * firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-15T00:00:00Z","modified":"2026-10-29T11:32:32.044231583Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-85335","title":"CVE-2026-4948 affecting package firewalld for versions less than 2.0.2-4","description":"A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.","status":"published","published":"2026-03-27T06:16:39Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.988217Z"},{"id":"CLSA-2026-1778887961","title":"firewalld: Fix of CVE-2026-4948","description":"- CVE-2026-4948: use PK_ACTION_CONFIG for setZoneSettings2/setPolicySettings to require write authorization","status":"published","published":"2026-05-15T23:32:46Z","modified":"2026-06-01T00:32:31.381934321Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779124021","title":"firewalld: Fix of CVE-2026-4948","description":"- CVE-2026-4948: use PK_ACTION_CONFIG instead of PK_ACTION_CONFIG_INFO for setZoneSettings2 and setPolicySettings to require config-write authorization","status":"published","published":"2026-05-18T17:07:11Z","modified":"2026-06-01T00:32:53.64573737Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"openSUSE-SU-2026:11289-1","title":"firewall-applet-2.3.2-2.1 on GA media","description":"These are all security issues fixed in the firewall-applet-2.3.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-17T00:00:00Z","modified":"2026-07-18T08:45:05.836323246Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21032-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issue\n\n- CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations\n  (bsc#1260903).\n","status":"published","published":"2026-06-22T15:08:58Z","modified":"2026-06-30T18:24:28.859091198Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1872-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issue:\n\n- CVE-2026-4948: local unprivileged users can modify the runtime firewall state without proper authentication due to\n  D-Bus setter mis-authorizations (bsc#1260903).\n","status":"published","published":"2026-05-15T15:22:46Z","modified":"2026-05-16T08:19:17.137636Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21418-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issues:\n\n- CVE-2026-4948: local unprivileged users can modify the runtime firewall state without proper authentication due to\n  D-Bus setter mis-authorizations (bsc#1260903).\n","status":"published","published":"2026-04-29T11:25:06Z","modified":"2026-05-01T18:27:05.729433Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:22060-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issue\n\n- CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations\n  (bsc#1260903).\n","status":"published","published":"2026-06-04T08:27:07Z","modified":"2026-06-13T18:24:16.924436976Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22263-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issue\n\n- CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations\n  (bsc#1260903).\n","status":"published","published":"2026-06-22T15:12:23Z","modified":"2026-06-30T18:24:32.951225469Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22343-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issue\n\n- CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations\n  (bsc#1260903).\n","status":"published","published":"2026-06-22T15:12:23Z","modified":"2026-07-02T18:24:12.377038388Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2302-1","title":"Security update for firewalld","description":"This update for firewalld fixes the following issue:\n\n- CVE-2026-4948: local unprivileged users can modify the runtime firewall state without proper authentication due to\n  D-Bus setter mis-authorizations (bsc#1260903).\n","status":"published","published":"2026-06-08T15:27:05Z","modified":"2026-06-09T09:00:04.579298999Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2745-1","title":"Security update for firewalld-legacy","description":"This update for firewalld-legacy fixes the following issue\n\n- CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations\n  (bsc#1260903).\n","status":"published","published":"2026-07-03T11:34:33Z","modified":"2026-07-04T08:30:05.934067306Z","updated_at":"2026-11-02T15:54:04.519245Z"}]}}