ZeroDay Findings
Sign inSign up

Findings

CVE-2026-104617

There are two invocations of to display a QR code for scanning.

Published Oct 15, 2026 · updated Oct 15, 2026

There are two invocations of to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · NIST NVD

    Detected

    There are two invocations of to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

  2. Oct 15, 2026 · NIST NVD

    Updated

    There are two invocations of to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

Sources

  • CVE.orgVulnerability recordCVE-2026-104617

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-104617

    30-day exploitation probability 0.1%

    first.org
  • NIST NVDVulnerability recordCVE-2026-104617

    There are two invocations of to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

    nvd.nist.gov

References