CVE-2026-54578 | MidnightBSD mport up to 2.7.7 Package Verification libmport/verify.c mport_verify_package weak password hash

September 17, 2026 Yanac

A vulnerability identified as problematic has been detected in MidnightBSD mport up to 2.7.7. This issue affects the function mport_verify_package of the file libmport/verify.c of the component Package Verification. This manipulation causes password hash with insufficient computational effort.

This vulnerability is tracked as CVE-2026-54578. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More