ThreatCluster

Critical InputPlumber Vulnerabilities Enable UI Input Injection and DoS

First seen 12 Jan 2026, 08:57 UTC •GbhackersCybersecuritynewsCyberpress •94% similarity •45

Article Content

Browse articles
ThreatCluster

Critical vulnerabilities in InputPlumber, a Linux input device utility for SteamOS, could allow attackers to inject UI inputs and cause denial-of-service conditions on affected systems. The vulnerabilities, tracked as CVE-2025-66005 and CVE-2025-14338, affect InputPlumber versions prior to v0.69.0 and are due to inadequate D-Bus authorization mechanisms.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

SuSE D-Bus InputPlumber Linux SteamOS Denial-of-Service Malware