{"schema_version":1,"title":"Uutils Coreutils vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 44 vulnerabilities in Uutils Coreutils: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-35381, was published on 22 April 2026.","url":"https://junglewise.ai/threats/technologies/uutils-coreutils","json_url":"https://junglewise.ai/threats/technologies/uutils-coreutils.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/uutils-coreutils","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":44,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":44},"latest":[{"cve":"CVE-2026-35381","cvss":3.3,"epss":0.0018,"slug":"cve-2026-35381-uutils-coreutils-incorrect-provision-of-specified-functionality","title":"uutils coreutils Incorrect Provision of Specified Functionality in cut","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:43.2+00:00","url":"https://junglewise.ai/threats/cve-2026-35381-uutils-coreutils-incorrect-provision-of-specified-functionality"},{"cve":"CVE-2026-35380","cvss":5.5,"epss":0.0016,"slug":"cve-2026-35380-uutils-coreutils-has-an-improper-input-validation-issue-in-its","title":"uutils coreutils has an Improper Input Validation Issue in its cut Utility","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:43.047+00:00","url":"https://junglewise.ai/threats/cve-2026-35380-uutils-coreutils-has-an-improper-input-validation-issue-in-its"},{"cve":"CVE-2026-35379","cvss":3.3,"epss":0.0015,"slug":"cve-2026-35379-uutils-coreutils-has-an-incorrect-provision-of-specified","title":"A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:] character classes.","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:42.887+00:00","url":"https://junglewise.ai/threats/cve-2026-35379-uutils-coreutils-has-an-incorrect-provision-of-specified"},{"cve":"CVE-2026-35378","cvss":3.3,"epss":0.0016,"slug":"cve-2026-35378-uutils-coreutils-has-an-incorrect-short-circuit-evaluation-issue","title":"uutils coreutils has an Incorrect Short Circuit Evaluation Issue","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:42.73+00:00","url":"https://junglewise.ai/threats/cve-2026-35378-uutils-coreutils-has-an-incorrect-short-circuit-evaluation-issue"},{"cve":"CVE-2026-35377","cvss":3.3,"epss":0.001,"slug":"cve-2026-35377-uutils-coreutils-has-an-improper-input-validation-issue-in-its","title":"uutils coreutils has an Improper Input Validation Issue in its env Utility","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:42.577+00:00","url":"https://junglewise.ai/threats/cve-2026-35377-uutils-coreutils-has-an-improper-input-validation-issue-in-its"},{"cve":"CVE-2026-35376","cvss":4.5,"epss":0.0011,"slug":"cve-2026-35376-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:42.43+00:00","url":"https://junglewise.ai/threats/cve-2026-35376-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race"},{"cve":"CVE-2026-35375","cvss":3.3,"epss":0.0014,"slug":"cve-2026-35375-uutils-coreutils-has-an-improper-handling-of-unicode-encoding","title":"uutils coreutils has an Improper Handling of Unicode Encoding Issue","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:42.293+00:00","url":"https://junglewise.ai/threats/cve-2026-35375-uutils-coreutils-has-an-improper-handling-of-unicode-encoding"},{"cve":"CVE-2026-35374","cvss":6.3,"epss":0.0007,"slug":"cve-2026-35374-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:42.127+00:00","url":"https://junglewise.ai/threats/cve-2026-35374-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race"},{"cve":"CVE-2026-35373","cvss":3.3,"epss":0.0012,"slug":"cve-2026-35373-uutils-coreutils-ln-improper-handling-of-non-utf-8-filenames","title":"uutils coreutils ln improper handling of non-UTF-8 filenames","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:41.997+00:00","url":"https://junglewise.ai/threats/cve-2026-35373-uutils-coreutils-ln-improper-handling-of-non-utf-8-filenames"},{"cve":"CVE-2026-35372","cvss":5,"epss":0.0014,"slug":"cve-2026-35372-uutils-coreutils-has-a-unix-symbolic-link-symlink-following-issue","title":"uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:41.85+00:00","url":"https://junglewise.ai/threats/cve-2026-35372-uutils-coreutils-has-a-unix-symbolic-link-symlink-following-issue"},{"cve":"CVE-2026-35371","cvss":3.3,"epss":0.0012,"slug":"cve-2026-35371-uutils-coreutils-ui-misrepresentation-in-id-utility","title":"uutils coreutils UI misrepresentation in id utility","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:40.987+00:00","url":"https://junglewise.ai/threats/cve-2026-35371-uutils-coreutils-ui-misrepresentation-in-id-utility"},{"cve":"CVE-2026-35370","cvss":4.4,"epss":0.0011,"slug":"cve-2026-35370-uutils-coreutils-incorrect-gid-calculation-in-id-utility","title":"uutils coreutils incorrect GID calculation in id utility","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:40.833+00:00","url":"https://junglewise.ai/threats/cve-2026-35370-uutils-coreutils-incorrect-gid-calculation-in-id-utility"},{"cve":"CVE-2026-35369","cvss":5.5,"epss":0.0013,"slug":"cve-2026-35369-uutils-coreutils-improper-input-validation-in-kill-utility","title":"uutils coreutils improper input validation in kill utility","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:40.687+00:00","url":"https://junglewise.ai/threats/cve-2026-35369-uutils-coreutils-improper-input-validation-in-kill-utility"},{"cve":"CVE-2026-35368","cvss":7.8,"epss":0.0014,"slug":"cve-2026-35368-uutils-coreutils-has-an-untrusted-search-path","title":"uutils coreutils has an Untrusted Search Path","severity":"high","exploited":false,"published_at":"2026-04-22T17:16:40.56+00:00","url":"https://junglewise.ai/threats/cve-2026-35368-uutils-coreutils-has-an-untrusted-search-path"},{"cve":"CVE-2026-35367","cvss":3.3,"epss":0.0011,"slug":"cve-2026-35367-uutils-coreutils-has-an-incorrect-permission-assignment-for","title":"uutils coreutils has an Incorrect Permission Assignment for Critical Resource","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:40.423+00:00","url":"https://junglewise.ai/threats/cve-2026-35367-uutils-coreutils-has-an-incorrect-permission-assignment-for"},{"cve":"CVE-2026-35366","cvss":4.4,"epss":0.0017,"slug":"cve-2026-35366-uutils-coreutils-printenv-inspection-evasion-via-invalid-utf-8","title":"uutils coreutils printenv inspection evasion via invalid UTF-8 sequences","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:40.167+00:00","url":"https://junglewise.ai/threats/cve-2026-35366-uutils-coreutils-printenv-inspection-evasion-via-invalid-utf-8"},{"cve":"CVE-2026-35365","cvss":6.6,"epss":0.0016,"slug":"cve-2026-35365-uutils-coreutils-symlink-expansion-in-mv-during-cross-device-move","title":"uutils coreutils symlink expansion in mv during cross-device move","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:39.9+00:00","url":"https://junglewise.ai/threats/cve-2026-35365-uutils-coreutils-symlink-expansion-in-mv-during-cross-device-move"},{"cve":"CVE-2026-35364","cvss":6.3,"epss":0.0009,"slug":"cve-2026-35364-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:39.737+00:00","url":"https://junglewise.ai/threats/cve-2026-35364-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race"},{"cve":"CVE-2026-35363","cvss":5.6,"epss":0.0017,"slug":"cve-2026-35363-uutils-coreutils-protection-bypass-in-rm-utility","title":"uutils coreutils protection bypass in rm utility","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:39.12+00:00","url":"https://junglewise.ai/threats/cve-2026-35363-uutils-coreutils-protection-bypass-in-rm-utility"},{"cve":"CVE-2026-35362","cvss":3.6,"epss":0.0018,"slug":"cve-2026-35362-uutils-coreutils-toctou-symlink-race-in-safe-traversal-on-non","title":"uutils coreutils TOCTOU symlink race in safe_traversal on non-Linux Unix","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:38.96+00:00","url":"https://junglewise.ai/threats/cve-2026-35362-uutils-coreutils-toctou-symlink-race-in-safe-traversal-on-non"},{"cve":"CVE-2026-35361","cvss":3.4,"epss":0.0014,"slug":"cve-2026-35361-uutils-coreutils-incorrect-permission-assignment-in-mknod","title":"uutils coreutils incorrect permission assignment in mknod","severity":"low","exploited":false,"published_at":"2026-04-22T17:16:38.827+00:00","url":"https://junglewise.ai/threats/cve-2026-35361-uutils-coreutils-incorrect-permission-assignment-in-mknod"},{"cve":"CVE-2026-35360","cvss":6.3,"epss":0.001,"slug":"cve-2026-35360-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:38.673+00:00","url":"https://junglewise.ai/threats/cve-2026-35360-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race"},{"cve":"CVE-2026-35359","cvss":4.7,"epss":0.0013,"slug":"cve-2026-35359-uutils-coreutils-has-a-link-following-issue","title":"uutils coreutils has a Link Following issue","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:38.537+00:00","url":"https://junglewise.ai/threats/cve-2026-35359-uutils-coreutils-has-a-link-following-issue"},{"cve":"CVE-2026-35358","cvss":4.4,"epss":0.0018,"slug":"cve-2026-35358-uutils-coreutils-incorrect-device-node-handling-in-cp-recursive","title":"uutils coreutils incorrect device node handling in cp recursive copy","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:38.393+00:00","url":"https://junglewise.ai/threats/cve-2026-35358-uutils-coreutils-incorrect-device-node-handling-in-cp-recursive"},{"cve":"CVE-2026-35357","cvss":4.7,"epss":0.0009,"slug":"cve-2026-35357-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:38.267+00:00","url":"https://junglewise.ai/threats/cve-2026-35357-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Uutils Coreutils","slug":"uutils-coreutils","vendor":{"hub":true,"name":"Uutils","slug":"uutils","url":"https://junglewise.ai/threats/vendors/uutils"},"aliases":[],"description":"Coreutils is a collection of basic file, shell, and text processing utilities.","url":"https://junglewise.ai/threats/technologies/uutils-coreutils"},"most_severe":[{"cve":"CVE-2026-35368","cvss":7.8,"epss":0.0014,"slug":"cve-2026-35368-uutils-coreutils-has-an-untrusted-search-path","title":"uutils coreutils has an Untrusted Search Path","severity":"high","exploited":false,"published_at":"2026-04-22T17:16:40.56+00:00","url":"https://junglewise.ai/threats/cve-2026-35368-uutils-coreutils-has-an-untrusted-search-path"},{"cve":"CVE-2026-35338","cvss":7.3,"epss":0.0018,"slug":"cve-2026-35338-uutils-coreutils-chmod-preserve-root-bypass-via-non-canonical","title":"uutils coreutils chmod --preserve-root bypass via non-canonical paths","severity":"high","exploited":false,"published_at":"2026-04-22T17:16:35.583+00:00","url":"https://junglewise.ai/threats/cve-2026-35338-uutils-coreutils-chmod-preserve-root-bypass-via-non-canonical"},{"cve":"CVE-2026-35341","cvss":7.1,"epss":0.0017,"slug":"cve-2026-35341-uutils-coreutils-improper-permission-assignment-in-mkfifo","title":"uutils coreutils improper permission assignment in mkfifo","severity":"high","exploited":false,"published_at":"2026-04-22T17:16:36.06+00:00","url":"https://junglewise.ai/threats/cve-2026-35341-uutils-coreutils-improper-permission-assignment-in-mkfifo"},{"cve":"CVE-2026-35352","cvss":7,"epss":0.0015,"slug":"cve-2026-35352-uutils-coreutils-has-a-time-of-check-to-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition","severity":"high","exploited":false,"published_at":"2026-04-22T17:16:37.597+00:00","url":"https://junglewise.ai/threats/cve-2026-35352-uutils-coreutils-has-a-time-of-check-to-time-of-use-toctou-race"},{"cve":"CVE-2026-35349","cvss":6.7,"epss":0.0019,"slug":"cve-2026-35349-uutils-coreutils-protection-bypass-via-symlink-in-rm-preserve","title":"uutils coreutils protection bypass via symlink in rm --preserve-root","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:37.19+00:00","url":"https://junglewise.ai/threats/cve-2026-35349-uutils-coreutils-protection-bypass-via-symlink-in-rm-preserve"},{"cve":"CVE-2026-35365","cvss":6.6,"epss":0.0016,"slug":"cve-2026-35365-uutils-coreutils-symlink-expansion-in-mv-during-cross-device-move","title":"uutils coreutils symlink expansion in mv during cross-device move","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:39.9+00:00","url":"https://junglewise.ai/threats/cve-2026-35365-uutils-coreutils-symlink-expansion-in-mv-during-cross-device-move"},{"cve":"CVE-2026-35350","cvss":6.6,"epss":0.0013,"slug":"cve-2026-35350-uutils-coreutils-doesn-t-properly-handle-setuid-and-setgid-bits","title":"uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:37.327+00:00","url":"https://junglewise.ai/threats/cve-2026-35350-uutils-coreutils-doesn-t-properly-handle-setuid-and-setgid-bits"},{"cve":"CVE-2026-35355","cvss":6.3,"epss":0.0012,"slug":"cve-2026-35355-uutils-coreutils-toctou-symlink-race-in-install-utility","title":"uutils coreutils TOCTOU symlink race in install utility","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:37.993+00:00","url":"https://junglewise.ai/threats/cve-2026-35355-uutils-coreutils-toctou-symlink-race-in-install-utility"},{"cve":"CVE-2026-35356","cvss":6.3,"epss":0.0011,"slug":"cve-2026-35356-uutils-coreutils-symlink-race-in-install-d-directory-creation","title":"uutils coreutils symlink race in install -D directory creation","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:38.13+00:00","url":"https://junglewise.ai/threats/cve-2026-35356-uutils-coreutils-symlink-race-in-install-d-directory-creation"},{"cve":"CVE-2026-35360","cvss":6.3,"epss":0.001,"slug":"cve-2026-35360-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race","title":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","severity":"medium","exploited":false,"published_at":"2026-04-22T17:16:38.673+00:00","url":"https://junglewise.ai/threats/cve-2026-35360-uutils-coreutils-has-a-time-of-check-time-of-use-toctou-race"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}