CVE-2022-27778

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

CVSS 3.1

8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

EPSS

3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-25)

CWE

CWE-706

Published

2022-06-02

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• haxx:curl
• netapp:active_iq_unified_manager
• netapp:bh500s_firmware
• netapp:clustered_data_ontap
• netapp:h300s_firmware
• netapp:h410s_firmware
• netapp:h700s_firmware
• netapp:hci_compute_node_firmware
• netapp:oncommand_insight
• netapp:oncommand_workflow_automation
• netapp:snapcenter
• netapp:solidfire_\&_hci_management_node
• oracle:mysql_server
• splunk:universal_forwarder

References

• https://hackerone.com/reports/1553598
• https://security.netapp.com/advisory/ntap-20220609-0009/
• https://security.netapp.com/advisory/ntap-20220729-0004/
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://hackerone.com/reports/1553598

Check your stackJSON