CVE-2026-104619

HighCVSS 7.8/10Last modified Nov 12, 2026

Description

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1328

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1046208.5A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain rooCVE-2026-1046236.3A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.CVE-2026-1046256.3A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/indexCVE-2026-1046268.8A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that iCVE-2026-1046275.4The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without checking that the signed-in CVE-2026-1046286.5Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with CVE-2026-1046298.8A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to lCVE-2026-1046328.8Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerunCVE-2026-1046336.5When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paCVE-2026-1046342.3Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and nullCVE-2026-1046358.2Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash CVE-2026-1046367.5Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent
CVE-2026-104619: High severity, CVSS 7.8 | Vulnix