Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-01 | 2 | Disclosure2 |
| 2026-08-11 | 1 | Patch1 |
🚨 ATENÇÃO, admins do #openSUSE! A falha de autorização no PackageKit (CVE-2026-10294) permite exploração remota. Atualize já com zypper in -t patch SUSE-2026-3561=1. -> https://tinyurl.com/4ajfr9wm https://t.co/hMzEBEK3Ys
Post summary
The post alerts openSUSE administrators to the CVE‑2026‑10294 authorization flaw in PackageKit and instructs them to apply the SUSE-2026‑3561 patch immediately.
🚨*CVE* CVE-2026-10294 A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulatio… https://www.cve.org/CVERecord?id=CVE-2026-10294 ----- Traducción: CVE-2026-10294 Se … http://infoflow.cloud`
Post summary
CVE-2026-10294 is a newly disclosed vulnerability in PackageKit, detailing the affected component and function but lacking PoC, exploitation evidence, or remediation information.
CVE-2026-10294 A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulatio… https://www.cve.org/CVERecord?id=CVE-2026-10294
Post summary
The post announces a discovered vulnerability in PackageKit’s g_file_test function (up to version 1.3.5), providing technical details but no evidence of exploitation or patches.