The vulnerability identified as CVE-2026-41047 affects presire qSnapper versions prior to 1.3.3. It involves missing authentication controls on the "snapshot diff" functions, which are critical for protecting sensitive information. Due to this lack of authentication, a local attacker can view information that is otherwise protected by read permissions. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no privileges or user interaction, and the impact is high on confidentiality. There is no vendor advisory or patch information available to confirm remediation status.

An attacker with local access can exploit this vulnerability to bypass authentication controls on the snapshot diff functions, gaining unauthorized access to sensitive information that should be protected. This compromises confidentiality but does not affect integrity or availability. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only to reduce risk of exploitation.