Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.1%	CVE-2026-96425lomiri-download-manager · Incorrect Permission Assignment for Critical Resource Medium5.5EPSS 0.1%2026-10-16CVE Database V5CVE-2026-96425 CVE-2026-96425 is a medium severity vulnerability in UBports lomiri-download-manager where incorrect DBus policy allows an arbitrary user to execute commands as root. This issue arises from improper permission assignment for a critical resource, enabling privilege escalation via DBus. The vulnerability affects versions from 0.1.0 up to but not including 0.3.3. EPSS 0.1%Vulnerability UBports #cwe-732 #ghsa-xrrp-gpj2-96j9	CVE Database V5	2026-10-16
High	7.8	EPSS 0.1%	CVE-2026-96424lomiri-download-manager · Incorrect Permission Assignment for Critical Resource High7.8EPSS 0.1%2026-10-16CVE Database V5CVE-2026-96424 CVE-2026-96424 is a high-severity vulnerability in UBports' lomiri-download-manager, specifically in the lomiri-upload-manager component. It involves incorrect DBus policy permissions that allow an arbitrary user to read any file as root via DBus. This affects versions from 0.1.0 up to but not including 0.3.3. EPSS 0.1%Vulnerability UBports #cwe-732 #ghsa-cw8r-ph9g-gwmc	CVE Database V5	2026-10-16

Showing 1–2 of 2 results