Critical Security Update for kbd Package: CVE-2026-72693
Summary
RHSA-2026:78951: Red Hat Security Advisory: kbd security update. Affects kbd versions < 0:2.0.4-11.el8_10.1. Fixed in 0:2.0.4-11.el8_10.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kbd package is a key component in the Red Hat Enterprise Linux ecosystem, providing essential keyboard handling utilities. It includes various tools for managing keyboard layouts and configurations, making it vital for user interaction with the system. However, this package has been identified with a security vulnerability that could potentially compromise system integrity.
Vulnerability Detail
CVE-2026-72693 is a security vulnerability that affects the kbd package, allowing unauthorized access to sensitive information. This vulnerability arises from improper handling of keyboard input, which could lead to information disclosure or system compromise. The ramifications of this vulnerability are significant, as it could allow attackers to exploit the system's keyboard input mechanisms, potentially leading to unauthorized access or data breaches. The CVSS score for this vulnerability is 7.8, indicating a high severity level.
How To Fix
Minimum fixed version
0:2.0.4-11.el8_10.1
This is the first release that contains the fix.
sudo dnf update kbdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider restricting access to the affected systems and monitoring for any unusual activity. Implementing strict user permissions can help mitigate the risk until the package is updated.
Conclusion
The kbd package has a critical vulnerability (CVE-2026-72693) that poses significant risks to system security. It is essential to update to the patched version to mitigate these risks. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for kbd →
FAQ
CVE-2026-72693 is a security vulnerability in the kbd package that could allow unauthorized access to sensitive information.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If you cannot update the package right away, restrict access to the affected systems and monitor for unusual activity as a temporary measure.
The CVSS score for this vulnerability is 7.8, indicating a high severity level that requires prompt attention.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:78951.json.
Related vulnerabilities
Recent vulnerabilities recorded for kbd.
