AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-93676

Red Hat Enterprise Linux: information disclosure

Red Hat

CVE-2026-93676 · Published Sep 18, 2026 · updated Sep 22, 2026

Low3.2
No fix yet
Red Hat advisory

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive information to unauthorized applications.

Affected versions

PackageAffectedFixed in
Red Hat Enterprise Linux 10
Product
all versionsNo fix yet
Red Hat Enterprise Linux 9
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Red Hat advisories

All Red Hat
Critical 9.3Sep 18Red Hat OpenShift console: server-side request forgeryCVE-2026-75885no fix yetMedium 6.5Sep 18Red Hat Netty: request smugglingCVE-2026-93574no fix yetMedium 6.5Sep 18Red Hat Netty: request smugglingCVE-2026-93562no fix yetMedium 6.1Sep 18A flaw was found in cockpit-filesCVE-2026-91202no fix yetMedium 6.0Sep 18Red Hat Enterprise Linux 9: race conditionCVE-2026-91203no fix yetMedium 6.0Sep 18Red Hat cockpit-files: race conditionCVE-2026-91205no fix yet