CVE-2026-93676 Xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

EUVD-2026-82937

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

CVE-2026-93676

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

CVE-2026-93676: Improper Access Control

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2026-3639)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c fil...

Astra Linux – Vulnerability in Flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak applications that had direct access to AFUNIX sockets—such as those used by Wayland, Pipewire, or pipewire-pulse—could trick portals and other host-...

Astra Linux – Vulnerability in Dbus

A issue was discovered in D-Bus before 1.12.24, 1.13.x, and 1.14.x, before 1.14.4, and 1.15.x, before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures...

glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...

Oracle Linux 10 : ELSA-2026-61340-0: / dbus-broker (ELSA-2026-613400)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-613400 advisory. 36-5 - Fix session bus denial of service via EMFILE during peer setup. Tenable has extracted the preceding description block directly from the Oracle Linux...

MiracleLinux 9 : dbus-broker-28-9.el9_8 (AXSA:2026-1736:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1736:01 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block...

Oracle Linux 9 : ELSA-2026-61355-0: / dbus-broker (ELSA-2026-613550)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-613550 advisory. 28-9 - Fix session bus denial of service via EMFILE during peer setup. Resolves: RHEL-233014 28-8 - Switch from useradd to systemd sysusers Resolves:...

RLSA-2026:61340 Moderate: dbus-broker security update

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features...

dbus-broker security update

An update is available for dbus-broker. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list dbus-broker is an implementation of a message bus as defined by the D-Bu...

RHSA-2026:61355 Red Hat Security Advisory: dbus-broker security update

Bulletin has no description...

RHSA-2026:61340 Red Hat Security Advisory: dbus-broker security update

Bulletin has no description...

RLSA-2026:61355 Moderate: dbus-broker security update

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features...

dbus-broker security update

An update is available for dbus-broker. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list dbus-broker is an implementation of a message bus as defined by the D-Bus...

AlmaLinux 10 : dbus-broker (ALSA-2026:61340)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:61340 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block directl...

dbus-broker security update

28-9 - Fix session bus denial of service via EMFILE during peer setup. Resolves: RHEL-233014 28-8 - Switch from useradd to systemd sysusers Resolves: RHEL-109036...

RockyLinux 10 : dbus-broker (RLSA-2026:61340)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61340 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block direct...