{"affected":[{"defaultStatus":"unaffected","packageName":"PackageKit","product":"PackageKit","source":"CNA: suse","vendor":"PackageKit","versions":[{"lessThan":"1.4.1","status":"affected","version":"0","versionType":"rpm"}]}],"cveId":"CVE-2026-104619","cwes":["CWE-1328"],"description":"Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: suse","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794302873111,"publishedAt":1794302873111,"references":[{"source":"CNA: suse","tags":["issue-tracking"],"url":"https://bugzilla.suse.com/show_bug.cgi?id=1284389"}],"remediation":[],"revision":"1c370e344372c8c92ef7506cfe8700fc08f63457feee3405336fbc7d40c5c128","sources":[{"modifiedAt":1794302873111,"name":"CNA: suse","retrievedAt":1794305298904,"url":"https://www.cve.org/CVERecord?id=CVE-2026-104619"}],"ssvc":null,"status":"published","title":"PackageKit ZYpp rollback vulnerability","updatedAt":1794305298904}