8
CVEs
1
Critical
2
High
0
KEV
0
PoC
0
Unpatched C/H
87.5%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
2
MEDIUM
4
LOW
1
Monthly CVE Trend
Affected Products (30)
Poppler
68
Debian Linux
32
Ubuntu Linux
23
Dbus
17
Fedora
16
Enterprise Linux
10
Opensuse
9
Enterprise Linux Server
7
Enterprise Linux Workstation
7
Enterprise Linux Desktop
7
Enterprise Linux Server Tus
6
Enterprise Linux Server Aus
6
D Bus
5
Ubuntu
5
Enterprise Linux Eus
4
Udisks
4
Libinput
4
Accountsservice
3
Mageia
3
Jwt Attack
2
Polkit
2
Enterprise Linux Server Eus
2
Gst Plugins Good
2
Openshift Container Platform
2
Ansible Tower
2
Xpdfreader
2
Xpdf
2
Gtk
1
Libdbus
1
Solaris
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-50292 | Arbitrary root code execution in libinput before 1.30.4 and 1.31.x before 1.31.3 arises because the libinput-device-group helper emits the device 'phys' (physical path) property without escaping it. Since this output is consumed by udev - which runs as root - an attacker who controls a device's phys string can inject additional udev properties and have commands executed with root privileges. Publicly available exploit code exists (SSVC exploitation: PoC) but EPSS is very low (0.02%, 6th percentile) and it is not on CISA KEV, indicating no confirmed in-the-wild exploitation. | CRITICAL | 9.8 | 0.0% | 49 |
|
| CVE-2026-35093 | Local privilege escalation in libinput allows authenticated users to execute arbitrary code within graphical compositor contexts by placing malicious Lua bytecode in system or user configuration directories. The vulnerability achieves scope change (CVSS:S:C) with high impact across confidentiality, integrity, and availability (8.8 CVSS), enabling attackers to monitor keyboard input including passwords and sensitive data. No public exploit identified at time of analysis, with EPSS data unavailable for this recently disclosed vulnerability. | HIGH | 8.8 | 0.0% | 44 |
|
| CVE-2026-26103 | Improper authorization in the udisks D-Bus API allows local unprivileged users to manipulate LUKS encryption headers on block devices with root privileges, potentially destroying encryption keys and rendering volumes inaccessible. An attacker with local access can exploit this to cause permanent data loss through denial-of-service. No patch is currently available for this vulnerability. | HIGH | 7.1 | 0.0% | 36 |
|
| CVE-2026-4897 | Polkit's polkit-agent-helper-1 setuid binary fails to bound input length on stdin, allowing local authenticated users to trigger out-of-memory conditions and deny system availability. An attacker with local login privileges can supply excessively long input to exhaust memory resources, causing a system-wide denial of service. No public exploit code or active exploitation has been confirmed at the time of analysis. | MEDIUM | 5.5 | 0.0% | 28 |
|
| CVE-2026-26104 | Unprivileged users can extract LUKS encryption headers from the udisks daemon due to missing authorization checks on a privileged D-Bus method, allowing attackers to read sensitive cryptographic metadata and potentially compromise encrypted storage confidentiality. The vulnerability affects systems running vulnerable versions of udisks and requires local access to exploit. No patch is currently available. | MEDIUM | 5.5 | 0.0% | 28 |
|
| CVE-2026-46469 | Integer division by zero in GStreamer gst-plugins-good before version 1.28.2 allows local attackers to cause denial of service by crafting malicious MP4 audio files. The isomp4 plugin's qtdemux_parse_trak function fails to validate atom data before performing division operations, causing application crash when parsing specially crafted audio tracks. No authentication required; exploitation requires only local file access and media playback. | MEDIUM | 4.0 | 0.0% | 20 |
|
| CVE-2026-46470 | Integer division by zero in GStreamer gst-plugins-good before version 1.28.2 allows local attackers to cause denial of service by supplying a maliciously crafted MP4 file with invalid atom data in audio tracks, triggering a crash in the qtdemux_audio_caps parser function without requiring user interaction or elevated privileges. | MEDIUM | 4.0 | 0.0% | 20 |
|
| CVE-2026-35094 | Libinput versions prior to 1.26.0 contain a dangling pointer vulnerability in Lua plugin garbage collection that allows local authenticated attackers to read sensitive data from system logs, requiring the ability to deploy malicious Lua plugin files to system directories and Lua plugin support to be enabled in the compositor. The vulnerability has a CVSS score of 3.3 (low severity) with confirmed patch availability, and poses minimal real-world risk due to high prerequisites including local file write access and plugin enablement. | LOW | 3.3 | 0.0% | 17 |
No patch
|