← Database

CVE-2026-41048

HIGH CVSS: 7.1 Published: 2026-06-22 Modified: 2026-07-07

Description

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

Affected Platforms

Presire Qsnapper

Weakness Type

CWE-863, CWE-863

References