Mmastodon TechnologyCybersecurity first seen 4 h ago, last 4 h ago, peak #12

MidnightBSD mport vulnerability CVE-2026-54584 disclosed

Original: CVE-2026-54584 MidnightBSD mport before 2.7.8 trusts TMPDIR in privileged contexts, letting attackers redirect root-leve

A new vulnerability, CVE-2026-54584, has been disclosed in MidnightBSD's mport package manager. Versions before 2.7.8 trust the TMPDIR environment variable in privileged contexts, allowing attackers to redirect root-level metadata extraction. The flaw carries a CVSS score of 7. A patch is under review, and users are advised to upgrade to 2.7.8 once it becomes available.

Why now: A newly disclosed privilege-escalation vulnerability in a BSD package manager is being flagged to the security community.

MidnightBSDmportCVE-2026-54584

Open on mastodon →

Evidence

• CVE-2026-54584 MidnightBSD mport before 2.7.8 trusts TMPDIR in privileged contexts, letting attackers redirect root-level metadata extraction. CVSS 7. Patch under review, upgrade to 2.7.8 when available. https://www. valtersit.com/cve/CVE-2026-545 84/ # CVE # infosec #… · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/2348323