PT-2026-132489

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlink app...

CVE-2026-116132

HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...

Linux Distros Unpatched Vulnerability : CVE-2026-113713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to...

CVE-2026-76497

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76497 Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76497

The Cisco Expressway Series software is affected by vulnerabilities involving insecure temporary files , categorized under CWE-377 . These issues were identified during an internal security review and are addressed in the October 2026 hardening release . The impact includes potential high integri...

EUVD-2026-107360

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76497 Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76497: Cisco Expressway Series Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

PT-2026-120710

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An issue exists in the firmware of the gateway involving insecure temporary files and the unrestricted upload of dangerous file types. This flaw could allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-109276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing...

DEBIAN-CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

Cisco TelePresence Video Communication Server Expressway Resource Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a resource management vulnerability caused by insecure temporary files. This vulnerability may allow local, low-privilege attackers to tamper with data under user interaction or affect the availability of services...

PT-2026-118614

Name of the Vulnerable Software and Affected Versions virtualenv versions 21.14.8 through 21.14.9 Description The app-data seeder may leave an environment linked to temporary package files that are deleted upon completion of the creation process. This state can be triggered via environment-variab...

Astra Linux – vulnerability in Tomcat9

Vulnerability related to improper resource shutdown or release in Apache Tomcat. If an error occurs including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to disk are not cleaned up immediately; instead, they are left to be deleted b...

Astra Linux – vulnerability in Thunderbird

Previously, Firefox for macOS and Linux would download temporary files to a user-specific directory located at /tmp. However, this behavior was changed so that the files were downloaded to /tmp itself, allowing them to be modified by other local users. This change was later reversed, restoring th...

DEBIAN-CVE-2026-109276

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and...

CVE-2026-109276

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and...