M
Vendor security profile
MidnightBSD
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS5.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
13
0
CVE KEV
CVE severity distribution
13toplam CVE
High3 (23%)
Medium7 (54%)
Low3 (23%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
5.3
CVE-2026-54584
mport trusts environment-controlled temporary directories in privileged metadata extraction
M
Patch status unknownEPSS %0
2.3
CVE-2026-54579
mport mirror-selection ping accepts insufficiently validated ICMP replies
M
Patch status unknownEPSS %0
5.8
CVE-2026-54576
mport package installation has symlink TOCTOU in chown and chmod handling
M
Patch status unknownEPSS %0
5.8
CVE-2026-54587
mport directory asset installation is vulnerable to symlink and path traversal races
M
Patch status unknownEPSS %0
5.8
CVE-2026-54575
mport package fetch and clean paths are vulnerable to TOCTOU filesystem races
M
Patch status unknownEPSS %0
2.0
CVE-2026-54578
mport verify can compare stale checksum data after hashing failures
M
Patch status unknownEPSS %0
6.0
CVE-2026-54586
mport permits repository and package mirror fetches over insecure transport
M
Patch status unknownEPSS %0
6.0
CVE-2026-54585
mport sample file handling can write outside the configured root
M
Patch status unknownEPSS %1
8.3
CVE-2026-54580
mport index decompression can leave partial or corrupt index data after zstd failures
M
Patch status unknownEPSS %0
6.0
CVE-2026-54582
mport package installation can overwrite existing unmanaged or differently owned files
M
Patch status unknownEPSS %1