CVE-2026-41046: Presire Qsnapper

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.

Affected products

• Presire Qsnapper: before 1.3.3 (fixed in 1.3.3)

Published 2026-06-22. Last modified 2026-06-28.