MidnightBSD vulnerabilities

Newest CVEs

• CVE-2026-54584

  mport trusts environment-controlled temporary directories in privileged metadata extraction

  MidnightBSD · mport

  Medium5.3
• CVE-2026-54579

  mport mirror-selection ping accepts insufficiently validated ICMP replies

  MidnightBSD · mport

  Low2.3
• CVE-2026-54576

  mport package installation has symlink TOCTOU in chown and chmod handling

  MidnightBSD · mport

  Medium5.8
• CVE-2026-54587

  mport directory asset installation is vulnerable to symlink and path traversal races

  MidnightBSD · mport

  Medium5.8
• CVE-2026-54575

  mport package fetch and clean paths are vulnerable to TOCTOU filesystem races

  MidnightBSD · mport

  Medium5.8
• CVE-2026-54578

  mport verify can compare stale checksum data after hashing failures

  MidnightBSD · mport

  Low2.0
• CVE-2026-54586

  mport permits repository and package mirror fetches over insecure transport

  MidnightBSD · mport

  Medium6.0
• CVE-2026-54585

  mport sample file handling can write outside the configured root

  MidnightBSD · mport

  Medium6.0
• CVE-2026-54580

  mport index decompression can leave partial or corrupt index data after zstd failures

  MidnightBSD · mport

  High8.3
• CVE-2026-54582

  mport package installation can overwrite existing unmanaged or differently owned files

  MidnightBSD · mport

  Medium6.0