Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: 9front Clear all filters
TI-2026-07956 CVE-2026-9054 · GHSA-ggv5-f87x-rf79

Invalid IP packets cause a kernel panic

Priority MEDIUM 45

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00291 Published 2026-05-22 Fixed CWE-130
TI-2026-07955 CVE-2026-9053 · GHSA-38r3-cgcv-g3qp

Unrestricted file upload in 9front

Priority LOW 30

Mothra would respect a default value given by a website for HTML file upload forms.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00276 Published 2026-05-22 Fixed CWE-434
TI-2024-07565 CVE-2024-8158 · GHSA-pm23-3px3-qrh7

User impersonation for lib9p based 9p fileservers

Priority MEDIUM 44

A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user.

CVSS 4.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00376 Published 2024-08-25 Fixed in 9645ae07eb66a59015e3e118d0024790c37400da CWE-639