OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-93676

LOW · CVSS 3.2 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability allows sandboxed Flatpak applications to intercept D-Bus broadcast messages by bypassing configured restrictions, which could lead to unauthorized access to sensitive information. This issue primarily affects systems using xdg-dbus-proxy where D-Bus message filtering is improperly implemented. Developers and administrators of Flatpak applications should prioritize addressing this vulnerability to mitigate potential data exposure risks.

CVE
CVE-2026-93676
Severity
LOW
CVSS
3.2
EPSS
0.14%

Original NVD Description

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive information to unauthorized applications.