Vulnerabilities in MidnightBSD
13 resultsCVE-2026-54582MEDIUMmport package installation can overwrite existing unmanaged or differently owned filesEPSS 0.6%CVE-2026-54585MEDIUMmport sample file handling can write outside the configured rootEPSS 0.5%CVE-2026-54583HIGHmport package bundle downloads allow unsafe destination filenamesEPSS 0.5%CVE-2026-54584MEDIUMmport trusts environment-controlled temporary directories in privileged metadata extractionEPSS 0.5%CVE-2026-54580HIGHmport index decompression can leave partial or corrupt index data after zstd failuresEPSS 0.3%CVE-2026-54581HIGHmport bootstrap index fetch can continue after hash verification failureEPSS 0.2%CVE-2026-54577LOWmport audit can inspect the wrong package when options are presentEPSS 0.2%CVE-2026-54579LOWmport mirror-selection ping accepts insufficiently validated ICMP repliesEPSS 0.2%CVE-2026-54586MEDIUMmport permits repository and package mirror fetches over insecure transportEPSS 0.2%CVE-2026-54575MEDIUMmport package fetch and clean paths are vulnerable to TOCTOU filesystem racesEPSS 0.1%CVE-2026-54578LOWmport verify can compare stale checksum data after hashing failuresEPSS 0.1%CVE-2026-54587MEDIUMmport directory asset installation is vulnerable to symlink and path traversal racesEPSS 0.1%CVE-2026-54576MEDIUMmport package installation has symlink TOCTOU in chown and chmod handlingEPSS 0.1%