CVE-2026-73585

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during script execution in a privileged context. This can lead to the overwrite of root-owned files, potentially disrupting system services or operation. Exploitation is conditional on the script running with elevated privileges and may be mitigated by sticky-directory symlink protections.

• CWE-377

• https://access.redhat.com/security/cve/CVE-2026-73585Mitigation, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2462235Issue Tracking, Vendor Advisory

Published

Aug 13, 2026

Last Modified

Nov 5, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-73579Incorrect Authorization vulnerability in Apache Syncope. …9.8
• CVE-2026-7358Use after free in Animation in Google Chrome prior to 147.0.…8.8
• CVE-2026-73580Missing authorization check in the getHRChild service in Apa…
• CVE-2026-73581Improper Check for Certificate Revocation vulnerability in A…6.5
• CVE-2026-73583A flaw was found in sblim-sfcb. A local attacker with access…6.6
• CVE-2026-73584A flaw was found in sblim-sfcb. A local, low-privileged atta…6.3
• CVE-2026-73586Dell Secure Connect Gateway (SCG) Policy Manager, versions p…6.4
• CVE-2026-73587Dell Secure Connect Gateway (SCG) Policy Manager, versions p…6.8
• CVE-2026-73588Dell Secure Connect Gateway (SCG) Policy Manager, versions p…7.4
• CVE-2026-73589Dell Secure Connect Gateway (SCG) Policy Manager, versions p…6.3
• CVE-2026-7359Use after free in ANGLE in Google Chrome prior to 147.0.7727…8.8
• CVE-2026-73591Dell Secure Connect Gateway (SCG) Policy Manager, versions p…7.5