By vendor

Presire vulnerabilities

Known CVEs affecting Presire products, prioritized by severity, with SEC.co remediation and detection guidance.

5 published vulnerabilities

• CVE-2026-41045HIGH 8.1

  A timing vulnerability in qSnapper's authentication system allows local users to bypass security protections that normally require administrative privileges. An attacker with access to the system could exploit this flaw to gain root-level control by manipulating the timing of authentication checks, circumventing the intended permission model.

• CVE-2026-41046HIGH 7.3

  qSnapper before version 1.3.3 contains a path traversal vulnerability in how it handles the 'configName' parameter. A local attacker can exploit this to supply malicious configuration files to the snapper tool, leading to denial of service or potential privilege escalation to root. This is a local-only attack that requires no authentication and no user interaction.

• CVE-2026-41048HIGH 7.1

  qSnapper, a snapshot management tool, has a flaw in how it manages user permissions for different administrative actions. A local user on a system could perform restricted operations—such as restoring snapshots—even if their account was only granted permission to delete them. This happens because the system incorrectly caches authentication decisions across different snapshot functions, allowing a lower-privileged user to bypass intended access controls. The vulnerability requires local access and user interaction to exploit.

• CVE-2026-41049HIGH 7.1

  A flaw in the qSnapper D-Bus service allows unprivileged local users to hijack authenticated sessions. When a privileged user authenticates to perform an action via D-Bus, the service incorrectly caches that authentication state without proper isolation. A local attacker can then invoke the same D-Bus functions without re-authenticating, effectively using the elevated privileges that were granted to the legitimate user. This is a local privilege escalation vulnerability requiring an existing login session on the affected system.

• CVE-2026-41047MEDIUM 5.5

  qSnapper, a snapshot management tool from Presire, contains a missing authentication control in its snapshot diff feature. This allows a local user to view sensitive information that should be restricted, even if they lack normal read permissions. The vulnerability affects versions prior to 1.3.3 and requires local system access to exploit.