Lucene search
K

CVE-2026-40354

šŸ—“ļøĀ 11 Apr 2026Ā 00:29:03Reported byĀ mitreTypeĀ 
cvelist
Ā cvelist
šŸ”—Ā www.cve.orgšŸ‘Ā 29Ā Views

CVE-2026-40354 lets any Flatpak app trash host files via a symlink attack on g_file_trash in affected versions.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-40354
11 Apr 202600:29
–attackerkb
Tenable Nessus
Amazon Linux 2023 : xdg-desktop-portal, xdg-desktop-portal-devel (ALAS2023-2026-1669)
20 May 202600:00
–nessus
Tenable Nessus
Amazon Linux 2 : xdg-desktop-portal, --advisory ALAS2-2026-3298 (ALAS-2026-3298)
14 May 202600:00
–nessus
Tenable Nessus
Ubuntu 24.04 LTS / 25.10 : XDG Desktop Portal vulnerability (USN-8287-1)
22 May 202600:00
–nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2026-40354
11 Apr 202600:00
–nessus
Amazon
Medium: xdg-desktop-portal
14 May 202600:00
–amazon
AlpineLinux
CVE-2026-40354
11 Apr 202600:29
–alpinelinux
CNNVD
XDG Desktop Portal å®‰å…Øę¼ę“ž
11 Apr 202600:00
–cnnvd
CVE
CVE-2026-40354
11 Apr 202600:29
–cve
Debian CVE
CVE-2026-40354
11 Apr 202600:29
–debiancve
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "product": "xdg-desktop-portal",
    "vendor": "Flatpak",
    "versions": [
      {
        "lessThan": "1.20.4",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.21.1",
        "status": "affected",
        "version": "1.21.0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation