Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: FreeBSD — security.freebsd.org/advisories/FreeBSD-SA-26:66.jail.asc Clear all filters
TI-2026-74627 CVE-2026-101305 · GHSA-crp4-cfvg-6vr3

Multiple jail filesystem root escapes

Priority MEDIUM 40

renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00232 Published 2026-10-15 Fixed in p4, p14 +2 CWE-273
TI-2026-74626 CVE-2026-101304

Jail filesystem root escapes in FreeBSD fdescfs

Priority LOW 32

When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the Capsicum capability rights of descriptor N.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00147 Published 2026-10-15 Fixed in p4, p14 +2 CWE-273