CyberSecBulletin

Presire vulnerabilities

We track 4 vulnerabilities in Presire products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 22, 2026.

4vulnerabilities
0critical
4high
0exploited
7.1average CVSS score

Latest Presire vulnerabilities

  • 7.1 High severity

    qSnapper: Incorrect Authorization

    CVE-2026-41049Presire

    Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authenticated for them.

  • 7.1 High severity

    qSnapper: Incorrect Authorization

    CVE-2026-41048Presire

    Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

  • 7.3 High severity

    qSnapper: Relative Path Traversal

    CVE-2026-41046Presire

    A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.

  • 7.0 High severity

    qSnapper: Time-of-check Time-of-use (TOCTOU) Race Condition

    CVE-2026-41045Presire

    A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.