LI
Product
libinput
by freedesktop · last CVE Jun 4, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch

Add libinput to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50292
9.8
0%
Jun 4
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
Affected: before 1.30.4; 1.31.0 before 1.31.3
Showing 1