TI-2010-05060 CVE-2010-20059 · GHSA-ffxm-wjwm-w3jp
FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution
Priority HIGH 81
FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface.
iXsystems
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
iXsystems records in CISA KEVNo iXsystems vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-11081 CVE-2024-11944 · GHSA-xpwc-vww2-w3pr
Path traversal in iXsystems TrueNAS CORE
Priority MEDIUM 43
iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability.
TI-2020-09348 CVE-2020-11650 · GHSA-jr46-4q88-9hjx
An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3…
Priority LOW 38
An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1.
TI-2026-85376 CVE-2026-123033 · GHSA-m6c5-5946-f5rx
Authentication bypass in TrueNAS SCALE HA heartbeat origin check
Priority LOW 36
Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes) allows an attacker on the same network segment to achieve unauth…
TI-2024-11083 CVE-2024-11946 · GHSA-2r3p-qwrg-gqxg
Cleartext transmission of sensitive information in iXsystems TrueNAS CORE
Priority LOW 29
iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability.