Threats affecting pkg:rpm/redhat/udisks2

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.8	EPSS 0.2%	CVE-2026-7867SUSE udisks2 · Security update for udisks2 High7.8EPSS 0.2%2026-08-30GCVE DatabaseCVE-2026-7867 A local privilege escalation vulnerability (CVE-2026-7867) exists in udisks2 due to insufficient authorization checks on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This flaw affects certain versions of SUSE and Red Hat Enterprise Linux 10. Red Hat has released a security update to address this issue. EPSS 0.2%Report on CVE-2026-7867 Vulnerability SUSE Product Security Team CWE-863	GCVE Database	2026-08-30
High	7.1	EPSS <0.1%	CVE-2026-26103Red Hat Security Advisory: udisks2 security update High7.1EPSS <0.1%2026-03-25GCVE DatabaseCVE-2026-26103 The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fix(es): * udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS <0.1%Report on CVE-2026-26103 Vulnerability Red Hat Product Security CWE-862	GCVE Database	2026-03-25
High	8.5	EPSS 0.7%	CVE-2025-8067SUSE udisks2 · Security update for udisks2 High8.5EPSS 0.7%2026-01-30GCVE DatabaseCVE-2025-8067 This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502). EPSS 0.7%Report on CVE-2025-8067 Vulnerability SUSE Product Security Team CWE-125	GCVE Database	2026-01-30

Page 1 of 1 · 1 duplicate CVE record merged