Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-4948 A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and… https://www.cve.org/CVERecord?id=CVE-2026-4948
Post summary
The announcement details a local privilege‑escalation flaw in firewalld where unprivileged users can abuse D‑Bus setters, but no PoC, exploit, active exploitation, or patch information is supplied.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4948 - Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization Intel Report: https://ift.tt/REgTD6I
Post summary
A brief alert announces CVE‑2026‑4948, a Firewalld vulnerability that allows local unprivileged users to alter firewall state via mis‑authorized d‑bus access, but provides no PoC, exploit, or patch details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | firewalld | firewalld | - | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |