CWE-377

123 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 6High 33Medium 62Low 22Not scored 0

CVEs per yearBy the year they were published

CVE-2026-122137
Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer
romkatv · powerlevel10k
Medium5.4
CVE-2026-64672
Terragrunt catalog predictable temp symlink clobber
gruntwork-io · terragrunt
Medium4.4
CVE-2026-121549
nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins
jarun · nnn
Medium4.1
CVE-2026-62847
Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)
metalama · Metalama
High8.2
CVE-2026-97209
Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build
elixir-lang · elixir
Medium5.4
CVE-2026-93864
Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
WatchGuard · Fireware OS
High7.1
CVE-2026-76497
Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
Medium6.6
CVE-2026-113713
virtualenv: Temporary app-data can leave dangling seed package links
pypa · virtualenv
Medium4.4
CVE-2026-55480
CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)
OpenPrinting · cups
Medium5.7
CVE-2026-82715
Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server
Hitachi · Hitachi Disk Array Driver for AIX
High7.9