CVE-2026-121549Medium· 4.4▾ Sunlitnnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-deri…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and overwrites any file the victim can write.
nnn <= 5.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121548High· 7.8nnn through 5.3 OS Command Injection via togglex Plugin
CVE-2026-121550Low· 3.3nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling
CVE-2026-123201Medium· 5.3buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API
CVE-2026-121627Medium· 6.1buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL
CVE-2026-73585Medium· 6.3Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
CVE-2026-73584Medium· 6.3Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling