Threats tagged 'ghsa-6952-c35h-6rff'

1 threat

Threats tagged 'ghsa-6952-c35h-6rff'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.1%	CVE-2026-111664portmaster · Missing Authentication for Critical Function Medium4.8EPSS 0.1%2026-10-16CVE Database V5CVE-2026-111664 Safing Portmaster versions before 2.2.5 have a missing authorization vulnerability that allows unprivileged local users to trigger updates via a specific API endpoint without proper authentication. This flaw enables attackers to supply a malicious update URL, bypass version checks, and install older signed versions containing previously fixed vulnerabilities. EPSS 0.1%Vulnerability safing #ghsa-6952-c35h-6rff	CVE Database V5	2026-10-16

Showing 1–1 of 1 result