IPFire vulnerabilities

1 known vulnerability in IPFire from IPFire Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101…

  CVE-2025-34116Jul 15, 2025IPFire ProjectEPSS 1.94%

  A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading