ZDI-CAN-28737 MEDIUM 6.1 Upcoming Feb 17, 2026

X.Org

X.Org is the widely-used open-source display server software that manages graphics and input on Linux and Unix systems. This medium-severity vulnerability requires local access and low-level privileges to exploit, but could allow an authenticated attacker to read sensitive data and cause service degradation without needing user interaction. Security teams should monitor for patches after the June 2026 vendor deadline and prioritize updates for systems where untrusted local users have access.

Advisory Details
Researcher Jan-Niklas Sohn
Reported February 17, 2026
Deadline June 17, 2026 62d
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy