Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2026/09/17 4:45 p.m.•16 views

CVE-2026-54581 mport bootstrap index fetch can continue after hash verification failure

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

8.3CVSS5.9AI score0.00218EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/17 4:45 p.m.•27 views

CVE-2026-54581

CVE-2026-54581 affects mport , the MidnightBSD Package Manager. The mport_fetch_bootstrap_index() function in libmport/fetch.c (prior to version 2.7.8) could return success when bootstrap index hash verification encountered a missing or invalid hash, because the failure path did not preserve a fa...

8.3CVSS5.9AI score0.00218EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/17 4:45 p.m.•15 views

CVE-2026-54581 mport bootstrap index fetch can continue after hash verification failure

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

8.3CVSS5.8AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/17 4:45 p.m.•37 views

CVE-2026-54581 mport bootstrap index fetch can continue after hash verification failure

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

8.3CVSS0.00218EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2026/05/06 8:40 p.m.•33 views

CVE-2026-40251

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The backup restore subsystem contains an...

7.1CVSS6.9AI score0.00471EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/02/26 12:00 a.m.•24 views

PT-2026-37103

Name of the Vulnerable Software and Affected Versions Incus versions prior to 7.0.0 Description Missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The backup restore subsystem and t...

7.1CVSS5.8AI score0.00471EPSS
SaveExploits1
Rows per page
Query Builder