CVE-2026-3836

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa22a55-3ac8-46bc-bb9d-e1411808358a...

CVE-2026-3836

A flaw was found in dnf5. A local, unprivileged attacker can exploit a path traversal vulnerability in the D-Bus locale configuration. By providing a specially crafted string to the locale key during session opening, the attacker can force the dnf5daemon-server to terminate, leading to an...