Read the docs

IPFire Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

IPFire Project records in CISA KEV

No IPFire Project vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-24276 CVE-2025-34116 · GHSA-gx74-wv49-wwfv

IPFire < 2.19 Core Update 101 proxy.cgi RCE

Priority MEDIUM 43

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01943 Published 2025-07-15 Fixed in 2.19 Core Update 101 CWE-20
Open these records in search →