CVE-2026-96425 debrief based on the supplied source corpus. The CVE record was published on 2026-10-16T16:22:52.693Z and has not been modified since then. The vulnerability affects the lomiri-download-manager service, allowing arbitrary users to run arbitrary commands as root over DBus due to an incorrect DBus policy. This issue has a CVSS score of 5.5 and is considered medium severity. Defenders and admi [truncated]
CVE-2026-96424 debrief based on CVE Program and NVD records. The vulnerability is caused by an incorrect DBus policy in lomiri-upload-manager, part of lomiri-download-manager, allowing arbitrary users to read arbitrary files as root over DBus. This has a CVSS score of 7.8 and is considered HIGH severity. Defenders should assess their exposure, review DBus policies, restrict access, and monitor for suspici [truncated]
