Read the docs

9front

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

9front records in CISA KEV

No 9front vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lib9p 1 record MEDIUM

Records

3 records

TI-2026-07956 CVE-2026-9054 · GHSA-ggv5-f87x-rf79

Invalid IP packets cause a kernel panic

Priority MEDIUM 45

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00291 Published 2026-05-22 Fixed CWE-130
TI-2024-07565 CVE-2024-8158 · GHSA-pm23-3px3-qrh7

User impersonation for lib9p based 9p fileservers

Priority MEDIUM 44

A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user.

CVSS 4.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00376 Published 2024-08-25 Fixed in 9645ae07eb66a59015e3e118d0024790c37400da CWE-639
TI-2026-07955 CVE-2026-9053 · GHSA-38r3-cgcv-g3qp

Unrestricted file upload in 9front

Priority LOW 30

Mothra would respect a default value given by a website for HTML file upload forms.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00276 Published 2026-05-22 Fixed CWE-434
Open these records in search →