CVE-2026-77113

Published Aug 20, 2026

Last updated 3 days ago

CVSS medium 6.7

Overview

Description: Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.
Source: security@ubuntu.com
NVD status: Received

Risk scores

CVSS 4.0

Type: Secondary
Base score: 6.7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: MEDIUM

Weaknesses

security@ubuntu.com: CWE-23

Hype score: Not currently trending

🚨*CVE* CVE-2026-77113 Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the priv… https://t.co/V6JgJnjDGq ----- Traducción: CVE-2026-77113 Tra… https://t.co/bY
@infoflowcloud
20 Aug 2026
32 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes

References

Sources include official advisories and independent security research.