Skip to content
CWE-377 vulnerabilities
-
progress software fiddler download & setup skill
Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill
CVE-2026-104657
7.5 High
-
romkatv gitstatus, powerlevel10k +1 more
Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer
CVE-2026-122137
5.4 Medium
-
jarun nnn
nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins
CVE-2026-121549
4.1 Medium
-
elixir-lang elixir
Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build
CVE-2026-97209
5.4 Medium
-
watchguard fireware os
Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
CVE-2026-93864
7.1 High
-
cisco telepresence video communication server (vcs) expressway
Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities
CVE-2026-76497
6.6 Medium
-
pypa virtualenv
virtualenv: Temporary app-data can leave dangling seed package links
CVE-2026-113713
Fix available
4.4 Medium
-
gruntwork-io terragrunt
Terragrunt catalog predictable temp symlink clobber
CVE-2026-64672
Fix available
4.4 Medium
-
metalama
Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)
CVE-2026-62847
Fix available
8.2 High
-
hitachi disk array driver for aix, disk array driver for virtual i/o server +1 more
Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server
CVE-2026-82715
7.9 High
-
elio-fm elio
Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture
CVE-2026-110234
4.1 Medium
-
codefori vscode-ibmi
Code for IBM i: Temporary files are visible to all users
CVE-2026-49484
5.1 Medium
-
openprinting cups
CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)
CVE-2026-55480
Fix available
5.7 Medium
-
yawkat lz4-java
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user
CVE-2026-106451
Fix available
7.3 High
-
fortra boks manager
Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
CVE-2026-79899
7.9 High
-
midnightbsd mport
mport trusts environment-controlled temporary directories in privileged metadata extraction
CVE-2026-54584
5.3 Medium
-
dell powerscale onefs
Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File...
CVE-2026-40635
5.4 Medium
-
spring ai, vmware spring ai +1 more
Predictable cache directory location allows local ONNX model substitution in Spring AI
CVE-2026-47852
7.5 High
-
contribsys faktory
Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)
CVE-2026-63404
7.3 High
-
vsdesk
Weak File Name Generation in vsDesk
CVE-2025-14602
5.3 Medium
-
phpmyfaq
phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
CVE-2026-75920
6.0 Medium
-
ether etherpad
Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
CVE-2026-55086
Fix available
4.2 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling
CVE-2026-73584
6.3 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
CVE-2026-73585
6.3 Medium
-
lenovo xclarity essentials onecli
Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI
CVE-2026-16791
1.0 Low
-
hewlett packard enterprise (hpe) edgeconnect sd-wan gateway (ecos)
Authenticated Path Traversal allows Unauthorized Access in Web Interface
CVE-2026-44878
7.2 High
-
flameshot-org flameshot
Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"
CVE-2026-62294
Fix available
5.1 Medium
-
linuxfabrik monitoring-plugins
linuxfabrik-lib: Insecure creation of SQLite databases
CVE-2026-53759
Fix available
2.0 Low
-
gnu gzip
Predictable Temporary File in GNU gzip
CVE-2026-41991
Fix available
2.0 Low
-
anthropic claude code, anthropics claude-code +1 more
Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write
CVE-2026-46406
Fix available
4.4 Medium
-
spring boot, vmware spring boot +1 more
Predictable Temp Directory in Artemis Auto-configuration
CVE-2026-41001
Fix available
5.3 Medium
-
rikyoz bit7z
bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update
CVE-2026-45384
6.1 Medium
-
steipete codexbar
CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow
CVE-2026-49135
7.2 High
-
steipete codexbar
CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File
CVE-2026-49134
7.5 High
-
spring ai, vmware spring ai +1 more
Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory
CVE-2026-40979
Fix available
6.1 Medium
-
No product listed
The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12...
CVE-2025-67223
Public exploit
7.5 High
-
spring boot, vmware spring boot +1 more
Spring Boot accepts predictable temp directory without ownership verification
CVE-2026-40973
Fix available
7.0 High
-
uutils coreutils
uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIR
CVE-2026-35342
Fix available
3.3 Low
-
splunk, splunk cloud platform, enterprise +2 more
Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise
CVE-2026-20204
7.1 High
-
poetry-plugin-tweak-dependencies-version PyPI
poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645
GHSA-5qvp-pr9f-2g2v
Fix available
4.4 Medium
-
enter software iperius backup
Enter Software Iperius Backup Backup Service temp file
CVE-2026-4822
7.3 High
-
psf requests
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
CVE-2026-25645
Public exploitFix available
4.4 Medium
-
apple macos
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in...
CVE-2026-20651
6.2 Medium
-
capgo cli
Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations
CVE-2026-56236
Fix available
6.8 Medium
-
opensuse sdbootutil
An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create...
CVE-2026-25701
Fix available
7.0 High
-
apple ipados, macos, tvos +3 more +5 more
A logging issue was addressed with improved data redaction. This issue is fixed in watchOS 26.3,...
CVE-2026-20649
7.5 High
-
apple macos
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS...
CVE-2026-20618
5.5 Medium
-
altera quartus prime lite, quartus prime standard, intel quartus prime +2 more
Quartus® Prime Standard and Quartus® Prime Lite Security Advisory
CVE-2025-14614
5.4 Medium
-
altera quartus prime pro, intel quartus prime +1 more
Quartus Prime Pro Edition Advisory
CVE-2025-14612
5.4 Medium
-
umbraco cms, umbraco-cms +1 more
Umbraco Vulnerable to Improper File Access and Credential Exposure through Dictionary Import Functionality
CVE-2025-66625
Fix available
4.9 Medium
- Show olderLoading…