SUSE SLES16: PackageKit / PackageKit-backend-zypp / PackageKit-branding-upstream / etc (SUSE-SU-2026:22860-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22860-1 advisory. Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit

C...

openSUSE 16: PackageKit / PackageKit-backend-dnf / PackageKit-backend-zypp / etc (openSUSE-SU-2026:21425-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21425-1 advisory. Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue...

Security update for PackageKit (moderate)

openSUSE security update: security update for packagekit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21425-1 Rating: moderate References: bsc1263252 bsc1267250 Cross-References: CVE-2026-10294 CVSS scores: CVE-2026-10294 SUSE : 4.3...

OPENSUSE-SU-2026:21425-1 Security update for PackageKit

This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...

SUSE-SU-2026:22860-1 Security update for PackageKit

This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...

Oracle Linux 10 : PackageKit (ELSA-2026-19141)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19141 advisory. 1.2.8-8.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...

PackageKit security update

1.2.8-8.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch...

Oracle Linux 9 : PackageKit (ELSA-2026-19354)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19354 advisory. 1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...

PackageKit security update

1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch...

MiracleLinux 9 : PackageKit-1.2.6-2.el9_8 (AXSA:2026-1214:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1214:03 advisory. PackageKit: race condition vulnerability leads to arbitrary package installation as root CVE-2026-41651 Tenable has extracted the preceding description block...

PackageKit Advanced Vulnerability Assessment with D-Bus and Polkit Security Analysis

This Python tool is an advanced security assessment framework designed to evaluate potential exposure to a PackageKit-related vulnerability scenario by combining version analysis, policy inspection, and D-Bus interaction testing...

📄 MacOS PackageKit ZSH Environment Privilege Escalation

This Metasploit module exploits CVE-2024-27822, a vulnerability in macOS PackageKit.framework where PKG installer scripts using a ZSH shebang !/bin/zsh are executed as root while inheriting the installing users environment. This causes ZSH to load the users /.zshenv with root privileges before th...

TencentOS Server 2: PackageKit (TSSA-2026:0567)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0567 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

OESA-2026-2689 PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fixes: A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of th...

MGASA-2026-0180 Updated packagekit packages fix security vulnerability

PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root. CVE-2026-41651...

Updated packagekit packages fix security vulnerability

PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root. CVE-2026-41651...

ROS-20260609-73-0005

The vulnerability of the PackageKit package manager is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system with root privileges...

RHEL 7 : PackageKit (RHSA-2026:22146)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:22146 advisory. PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architectu...

CVE-2026-10294

A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...