IPFire Project vulnerabilities
We track 1 vulnerability in IPFire Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest IPFire Project vulnerabilities
- 8.7 High severity
A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101…
A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading