CVE-2026-111664 | Safing Portmaster up to 2.2.4 Update Endpoint /api/v1/updates/from-url authorization

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in Safing Portmaster up to 2.2.4. This affects an unknown function of the file /api/v1/updates/from-url of the component Update Endpoint. The manipulation leads to missing authorization.

This vulnerability is documented as CVE-2026-111664. The attack needs to be performed locally. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More