Disclosure summary
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Source-reported weakness categories
CWE-279
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2026-4948
Open original source · Updated Oct 06, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| firewalld | firewalld | * {"versionEndIncluding":"2.4.0"} |
| redhat | enterprise_linux | 7.0 |
Microsoft Security Updates (CVRF) · 2026-Mar
Open original source · Updated Sep 24, 2026
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.
Microsoft maximum product score: 5.5
| Vendor | Product / association | Version / bounds |
|---|---|---|
| Microsoft update guide | cbl2 firewalld 1.0.3-2 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 firewalld 2.0.2-3 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 firewalld 1.0.3-2 | (MSRC status code 3) |
| Microsoft update guide | cbl2 firewalld 1.0.3-2 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 firewalld 2.0.2-4 on Azure Linux 3.0 | (MSRC status code 3) |
Vendor remediation references
- CBL-Mariner Releases · build 2.0.2-4 · product IDs 21296-17084, 21410-17084
- Vendor guidance · product IDs 21296-17084, 21410-17084
- Release Notes · product IDs 21295-21692
- Vendor guidance · product IDs 21295-21692
Original records & references
- NIST NVD record
- CVE Program record
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com — Mitigation, Vendor Advisory
- bugzilla.redhat.com — Issue Tracking, Vendor Advisory
- lists.debian.org
PUBLISHED 2026-03-27T02:16:39-04:00
MODIFIED 2026-10-06T14:16:54-04:00
INGESTED 2026-10-08T12:40:21-04:00