CVE-2026-41046
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Jun 22, 2026
Vendor
unknown
Description
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.