IPFire.org vulnerabilities
We track 2 vulnerabilities in IPFire.org products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2025.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest IPFire.org vulnerabilities
- 8.8 High severity
IPFire: Improper Neutralization of Special Elements used in an OS Command
IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the 'nobody' user via the BE_NAME parameter when installing a blacklist. When a blacklist is instal
- 8.8 High severity
IPFire: Improper Neutralization of Special Elements used in an OS Command
IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. When a user creates a Proxy