CyberSecBulletin

iXsystems vulnerabilities

We track 2 vulnerabilities in iXsystems products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest iXsystems vulnerabilities

  • 8.3 High severity

    TrueNAS SCALE: Authentication Bypass by Spoofing

    CVE-2026-123033iXsystems

    Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes) allows an attacker on the same network segment to achieve unauthenticated full-administrator API access

  • 8.8 High severity

    TrueNAS CORE: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-11944iXsystemsEPSS 1.59%

    iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of iXsystems TrueNAS devices. Authentication is not requ