CWE-379

CWE-379 · 5 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-379, highest CVSS first.

  1. HIGH 7.8CVE-2026-123974public PoC2026-11-06

    In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.8CVE-2026-102740public PoC2026-10-15

    The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path $java.…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-1145942026-11-09

    A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated in…

    AI risk analysis on Exploit-DB.ai →

  4. UNSCOREDCVE-2026-1189902026-10-30

    CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the…

    AI risk analysis on Exploit-DB.ai →

  5. UNSCOREDCVE-2026-119193public PoC2026-10-29

    PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sys_get_temp_dir() and r…

    AI risk analysis on Exploit-DB.ai →