CVE-2026-41048: Presire Qsnapper

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

Affected products

• Presire Qsnapper: before 1.3.3 (fixed in 1.3.3)

Published 2026-06-22. Last modified 2026-07-07.