Back to overview

CVE-2026-59678

HIGH
7.1
CVSS 4.0
Description
An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.

Metadata

CVE ID
CVE-2026-59678
State
PUBLISHED
Assigner
suse
Reserved
2026-07-06 11:59 UTC
Published
2026-07-23 06:48 UTC
Last updated
2026-07-23 06:48 UTC
Primary CWE
CWE-863
CWE-863: Incorrect Authorization
Vendor / Product
Linux-Gaming / PortProtonQt
Sources
cve.org  ·  NVD

Severity & Metrics

7.1 HIGH CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products (1)
VendorProductPlatformVersions
Linux-Gaming PortProtonQt — 0 < 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe
Weakness (CWE)
CWESourceDescription
CWE-863 cna CWE-863: Incorrect Authorization
CVSS scores (1)
ScoreSeverityVersionSourceVector
7.1 HIGH 4.0 cna CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
References (1)
Back to overview