ZDI-CAN-28737
MEDIUM 6.1
Upcoming
Feb 17, 2026
X.Org
X.Org is the widely-used open-source display server software that manages graphics and input on Linux and Unix systems. This medium-severity vulnerability requires local access and low-level privileges to exploit, but could allow an authenticated attacker to read sensitive data and cause service degradation without needing user interaction. Security teams should monitor for patches after the June 2026 vendor deadline and prioritize updates for systems where untrusted local users have access.
Advisory Details
Researcher
Jan-Niklas Sohn
Reported
February 17, 2026
Deadline
June 17, 2026
62d
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L