CVE-2026-41048 Caching of Authentication allows Authentication Bypass in qSnapper

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot"...

CVE-2026-41048

creationtimestamp| type| source ---|---|--- 2026-05-26 12:30:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqyowpr7z2z 2026-06-22 19:36:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movn3snyzh2m 2026-07-15 01:07:06+00:00| seen|...