Path Traversal Vulnerability in qSnapper by Presire

CVE-2026-41046

What is CVE-2026-41046?

A path traversal vulnerability exists in qSnapper, prior to version 1.3.3, which can be exploited by a local attacker. By manipulating the 'configName' parameter, malicious config files can be utilized to disrupt the service offered by qSnapper, potentially leading to a denial of service. Furthermore, this vulnerability could allow for privilege escalation, granting the attacker root access under certain conditions. Users are advised to upgrade to version 1.3.3 or later to mitigate this risk.

References