Critical Security Update for firewalld and Related Packages: CVE-2026-4948
Summary
RHSA-2026:76844: Red Hat Security Advisory: firewalld security update. Affects firewall-applet versions < 0:1.3.4-15.el9_6.1. Fixed in 0:1.3.4-15.el9_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Firewalld is a dynamic firewall management tool for Linux systems that provides a user-friendly interface for managing firewall rules. It allows users to configure firewall settings without the need for complex command-line operations. The affected packages include firewall-applet, firewall-config, firewalld, firewalld-filesystem, and python3-firewall, all of which are integral to the functionality of firewalld. These packages are designed to enhance security by controlling network traffic and managing firewall rules effectively.
Vulnerability Detail
The vulnerability identified as CVE-2026-4948 affects the firewalld package and its associated components. It originates from improper handling of certain inputs, which could lead to unauthorized access or modification of firewall rules. This vulnerability poses a significant risk as it may allow attackers to bypass security measures, potentially leading to data breaches or system compromise. The CVSS score for this vulnerability is 5.5, indicating a moderate severity level that requires prompt attention.
How To Fix
Minimum fixed version
0:1.3.4-15.el9_6.1
This is the first release that contains the fix.
sudo dnf update firewall-appletTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the firewalld service by implementing stricter firewall rules or disabling the service until the update is applied. To disable the firewalld service, use the command:
sudo systemctl stop firewalld' and 'sudo systemctl disable firewalld
However, this is not a permanent solution and should only be used until the update is completed.
Conclusion
The firewalld security update addresses a critical vulnerability (CVE-2026-4948) that could compromise system security. It is crucial to update the affected packages to the patched version to mitigate risks. Users are encouraged to apply the update promptly and consider using Vulert for ongoing monitoring of vulnerabilities.
See every vulnerability recorded for firewall-applet →
FAQ
CVE-2026-4948 is a security vulnerability affecting the firewalld package that could allow unauthorized access to firewall settings.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If you cannot update immediately, consider implementing stricter firewall rules or temporarily disabling the firewalld service as a workaround.
Not addressing this vulnerability could lead to unauthorized access to your system, compromising your data and security.
More information can be found in the Red Hat Security Advisory and the CVE database.
Related vulnerabilities
Recent vulnerabilities recorded for firewall-applet.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
