Midnight-commander Midnight Commander — known CVE vulnerabilities

Every CVE whose affected-product data names Midnight-commander Midnight Commander, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-36370 — CVSS 7.5 (high): An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is…
• CVE-2012-4463 — CVSS 5.1 (medium): Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple…