CWE-278 vulnerabilities

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-101304FreeBSD · Improper Check for Dropped Privileges High7.1EPSS 0.1%2026-10-15CVE Database V5CVE-2026-101304 CVE-2026-101304 is a vulnerability in FreeBSD where mounting fdescfs(4) in a jail with the "nodup" option causes file descriptors opened via /dev/fd/N to not inherit certain security restrictions. This allows a process in a jail to potentially escape the jail's filesystem root restriction by using a directory file descriptor received from another jail. EPSS 0.1%Vulnerability CWE-273	CVE Database V5	2026-10-15
Medium	6.7	EPSS 0.1%	CVE-2026-71477jdx mise · Insecure Preserved Inherited Permissions Medium6.7EPSS 0.1%2026-08-18CVE Database V5CVE-2026-71477 mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a root-installed executable, especially when MISE_INSTALL_PATH targets a shared location such as /usr/local/bin. This issue is fixed in version 2026.7.1. EPSS 0.1%Vulnerability CWE-278	CVE Database V5	2026-08-18
High	7.3	EPSS 0.3%	CVE-2026-6265Cerberus FTP Server · Insecure Preserved Inherited Permissions High7.3EPSS 0.3%2026-04-27CVE Database V5CVE-2026-6265 Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1 EPSS 0.3%Vulnerability CWE-278	CVE Database V5	2026-04-27

Page 1 of 1