EXPOSURES › CVE-2026-50292
CVE-2026-50292
HIGH
DETAIL
SourceNVD · cve
Published2026-06-04
CVSS7.4
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-50292 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.