CVE-2026-26103

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.

• CWE-862
• CWE-862

• https://access.redhat.com/errata/RHSA-2026:3476
• https://access.redhat.com/errata/RHSA-2026:5831
• https://access.redhat.com/security/cve/CVE-2026-26103Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2433719Issue Tracking, Vendor Advisory
• https://github.com/storaged-project/udisks/security/advisories/GHSA-c75h-phf8-ccjm
• https://access.redhat.com/errata/RHSA-2026:3476
• https://access.redhat.com/errata/RHSA-2026:5831
• https://access.redhat.com/security/cve/CVE-2026-26103Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2433719Issue Tracking, Vendor Advisory
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26103.json

Published

Feb 25, 2026

Last Modified

Jul 15, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26097Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows …5.5
• CVE-2026-26098Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows …5.5
• CVE-2026-26099Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows …5.5
• CVE-2026-26100Incorrect Permission Assignment for Critical Resource in Owl…5.5
• CVE-2026-26101Incorrect Permission Assignment for Critical Resource in Owl…7.8
• CVE-2026-26102Incorrect Permission Assignment for Critical Resource in Owl…7.8
• CVE-2026-26104A flaw was found in the udisks storage management daemon tha…5.5
• CVE-2026-26105Improper neutralization of input during web page generation …9.3
• CVE-2026-26106Improper input validation in Microsoft Office SharePoint all…8.8
• CVE-2026-26107Use after free in Microsoft Office Excel allows an unauthori…7.8
• CVE-2026-26108Heap-based buffer overflow in Microsoft Office Excel allows …7.8
• CVE-2026-26109Out-of-bounds read in Microsoft Office Excel allows an unaut…7.8