← Vulnerability feed

Vulnerability record · CVE-2026-48700 · published 22 May 2026

CVE-2026-48700: Improper control of dynamically-managed code vulnerability

An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI in an org.freedesktop.FileManager1.ShowFolders D-Bus method call, PCManFM-Qt delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution or circumvent network namespace restrictions. NOTE: those outcomes are potentially unwanted by most users; however, the behavior of the product does comply with the applicable specification, and a simplistic solution (ensuring that the URI does not name a regular file) may have adverse consequences for I/O.

9.3 CVSS 4.0 Critical EPSS 0.17% · top 94.3% CWE-913 · Improper control of dynamically-managed code Deferred
9.3CVSS 4.0 base score
0.17%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
4References
23 Jul 2026Last modified by NVD

Description

An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI in an org.freedesktop.FileManager1.ShowFolders D-Bus method call, PCManFM-Qt delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution or circumvent network namespace restrictions. NOTE: those outcomes are potentially unwanted by most users; however, the behavior of the product does comply with the applicable specification, and a simplistic solution (ensuring that the URI does not name a regular file) may have adverse consequences for I/O.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:

References

LinkTags
https://github.com/lxqt/pcmanfm-qt/releases
https://www.openwall.com/lists/oss-security/2026/05/19/1
https://www.openwall.com/lists/oss-security/2026/05/20/2
http://www.openwall.com/lists/oss-security/2026/05/24/6

Track CVE-2026-48700 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2025-68613n8n workflow expression evaluation RCE for authenticated usersn8n versions from 0.211.0 before 1.120.4, 1.121.1, and 1.122.0 evaluate user-supplied workflow expressions in an execution context that is not suffic…KEVEPSS 99%analysed

Source: NIST National Vulnerability Database (record CVE-2026-48700), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.