Lucene search
K

EUVD-2026-21625

šŸ—“ļøĀ 11 Apr 2026Ā 03:30:29Reported byĀ EUVDTypeĀ 
euvd
Ā euvd
šŸ”—Ā euvd.enisa.europa.eušŸ‘Ā 2Ā Views

Flatpak xdg-desktop-portal before 1.20.4 and before 1.21.1 can trash any host file via g_file_trash symlink.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-40354
11 Apr 202600:29
–attackerkb
Tenable Nessus
Amazon Linux 2023 : xdg-desktop-portal, xdg-desktop-portal-devel (ALAS2023-2026-1669)
20 May 202600:00
–nessus
Tenable Nessus
Amazon Linux 2 : xdg-desktop-portal, --advisory ALAS2-2026-3298 (ALAS-2026-3298)
14 May 202600:00
–nessus
Tenable Nessus
Ubuntu 24.04 LTS / 25.10 : XDG Desktop Portal vulnerability (USN-8287-1)
22 May 202600:00
–nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2026-40354
11 Apr 202600:00
–nessus
Amazon
Medium: xdg-desktop-portal
14 May 202600:00
–amazon
AlpineLinux
CVE-2026-40354
11 Apr 202600:29
–alpinelinux
CNNVD
XDG Desktop Portal å®‰å…Øę¼ę“ž
11 Apr 202600:00
–cnnvd
CVE
CVE-2026-40354
11 Apr 202600:29
–cve
Cvelist
CVE-2026-40354
11 Apr 202600:29
–cvelist
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "6682e20c-5c77-3319-9026-51c4adaf7603",
        "vendor": {
          "name": "flatpak"
        }
      },
      {
        "id": "8c199d2b-31d8-3b5b-9601-fa02e97adbfa",
        "vendor": {
          "name": "flatpak"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "de2e5c41-afd3-37a0-a70a-d8286385f4e4",
        "product": {
          "name": "xdg-desktop-portal"
        },
        "product_version": "1.21.0 <1.21.1"
      },
      {
        "id": "f83a1b18-54ef-3d80-8976-2801fc7e9919",
        "product": {
          "name": "xdg-desktop-portal"
        },
        "product_version": "0 <1.20.4"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Apr 2026 03:30Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.12.9
EPSS0.00019
2