CVE-2026-54576 | MidnightBSD mport up to 2.7.7 bundle_read_install_pkg.c do_actual_install link following

September 17, 2026 Yanac

A vulnerability classified as problematic has been found in MidnightBSD mport up to 2.7.7. This affects the function do_actual_install of the file libmport/bundle_read_install_pkg.c. The manipulation leads to link following.

This vulnerability is documented as CVE-2026-54576. The attack needs to be performed locally. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More