Access Control

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.CVE-2011-2515packagekit · 0.4% likely

   CWE-732

2. The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.CVE-2013-1764Packagekit Project · 0.4% likely

   CWE-264

3. Packagekit's apt backend lets user install untrusted local packagesCVE-2020-16122PackageKit · CVSS 8.2 · 0.3% likely

   CWE-269

4. PackageKit ZYpp rollback vulnerabilityCVE-2026-104619PackageKit · CVSS 7.8 · 0.1% likely

   CWE-1328

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.