CVE-2026-4948
published 2026-03-27CVE-2026-4948: A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters…
PriorityP428medium5.5CVSS 3.1
AVLACLPRLUINSUCNIHAN
EPSS
0.12%
2.0th percentile
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firewalld | < firewalld 2.4.0-2 (sid) | firewalld 2.4.0-2 (sid) |
| firewalld | firewalld | <= 2.4.0 | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
firewalld incorrect execution-assigned permissions (Nessus ID 315054)
vuldb·2026-05-17·CVSS 5.5
CVE-2026-4948 [MEDIUM] firewalld incorrect execution-assigned permissions (Nessus ID 315054)
A vulnerability labeled as problematic has been found in firewalld. This vulnerability affects unknown code. Executing a manipulation can lead to incorrect execution-assigned permissions.
This vulnerability appears as CVE-2026-4948. The attack requires local access. There is no available exploit.
GHSA
GHSA-mxjh-5564-f256: A flaw was found in firewalld
ghsa_unreviewed·2026-03-27
CVE-2026-4948 [MEDIUM] CWE-279 GHSA-mxjh-5564-f256: A flaw was found in firewalld
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
OSV
CVE-2026-4948: A flaw was found in firewalld
osv·2026-03-27·CVSS 5.5
CVE-2026-4948 [MEDIUM] CVE-2026-4948: A flaw was found in firewalld
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Red Hat
firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
vendor_redhat·2026-03-27·CVSS 5.5
CVE-2026-4948 [MEDIUM] CWE-279 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized change
Debian
CVE-2026-4948: firewalld - A flaw was found in firewalld. A local unprivileged user can exploit this vulner...
vendor_debian·2026·CVSS 5.5
CVE-2026-4948 [MEDIUM] CVE-2026-4948: firewalld - A flaw was found in firewalld. A local unprivileged user can exploit this vulner...
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: resolved (fixed in 2.4.0-2)
trixie: open
Citrix
Citrix Security Bulletin CTX140984
vendor_citrix·CVSS 10.0
CVE-2014-4947 [CRITICAL] Citrix Security Bulletin CTX140984
Citrix Security Bulletin CTX140984
CVE References: CVE-2014-4947, CVE-2014-4948, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-4948 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2026-4948 [MEDIUM] CVE-2026-4948 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-4948 :
Linux Debian vulnerability analysis and mitigation
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Source : NVD
## 5.5
Score
Published March 27, 2026
Severity MEDIUM
CNA Score 5.5
Affected Technologies
Linux Debian
Linux Red Hat
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 5.2
Exploitation Probability (EPSS) N/A
Affected packages and libraries
firewal
Bugzilla
CVE-2026-46230 kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
bugzilla·2026-05-28
CVE-2026-46230 CVE-2026-46230 kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
CVE-2026-46230 kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
Check bounds against the end of the BO whenever we access the msg.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026052839-CVE-2026-46230-4948@gregkh/T
Bugzilla
CVE-2026-4948 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
bugzilla·2026-03-27·CVSS 5.5
CVE-2026-4948 [MEDIUM] CVE-2026-4948 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
CVE-2026-4948 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
firewalld <=2.4.0 appears to mis-authorize two runtime D-Bus setters, setZoneSettings2 and setPolicySettings, by guarding them with PK_ACTION_CONFIG_INFO. When the shipped desktop policy is active, that appears to let a local unprivileged user modify runtime firewall state without authentication. The attacker needs to have local, unprivileged access to a system with firewalld using the desktop profile of firewalld.
Bugzilla
CVE-2025-4948 libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup [fedora-all]
bugzilla·2025-05-19·CVSS 7.5
CVE-2025-4948 [HIGH] CVE-2025-4948 libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup [fedora-all]
CVE-2025-4948 libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup [fedora-all]
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2367183
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if
2026-03-27
Published