VulnSocial

CVE-2026-59678Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-07-23); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-23: 1Mentions · 2026-07-28: 1Technical Details · 2026-07-23: 1Technical Details · 2026-07-28: 107-2307-28
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Open Source Security mailing list@oss_security
    Disclosure

    CVE-2026-59678: PortProtonQt: Custom Polkit Rule Allows Escalation of NetworkManager and UDisks2 Privileges https://openwall.com/lists/oss-security/2026/07/22/4 a Polkit authentication bypass made possible by Polkit rules installed by PortProtonQt, a GUI to simplify launching of Windows games on Linux

    Post summary

    The post announces CVE‑2026‑59678 as a Privilege Escalation vulnerability caused by custom Polkit rules in PortProtonQt, providing technical details but no PoC, exploit code, or patch information.

    01030478
    4.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-59678 Incorrect Authorization in Linux-Gaming PortProtonQt Allows Arbitrary File System and Network Modification https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-59678

    Post summary

    The post announces a new vulnerability (CVE‑2026‑59678) in Linux‑Gaming PortProtonQt involving incorrect authorization that could lead to arbitrary file system and network modifications, with no evidence of a PoC, exploit, or active exploitation reported.

    00000108
    4.1K followersView on X

Explore more

Back to dashboard