CVE-2026-54586 | MidnightBSD mport up to 2.7.7 Fetch libmport/fetch.c missing encryption

September 17, 2026 Yanac

A vulnerability classified as problematic has been found in MidnightBSD mport up to 2.7.7. Affected by this vulnerability is the function mport_fetch_index/mport_fetch_bootstrap_index/mport_fetch_bundle of the file libmport/fetch.c of the component Fetch. This manipulation causes missing encryption of sensitive data.

This vulnerability is registered as CVE-2026-54586. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More