Skip to content
OpenAdvisories

Vendor

IETF

12 known vulnerabilities.

IETF at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
4
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202510
Feb 202520
Jan 202520
Dec 202400

Products

draft-ietf-v6ops-ra-guard 3 P802.1Q 3 IPv6 2 RFC2784 - Generic Routing Encapsulation (GRE) 1 RFC 1 draft-ietf-v6ops-ra-guard-08 1 RFC 7523 1 RFC2003 - IP Encapsulation within IP 1 DHCP 1 draft-ietf-intarea-gue-09 1

Latest advisories

  • High max 9.8
    NCSC-2024-0279 86 CVEs 1 exploited

    Kwetsbaarheden verholpen in Microsoft Windows

    Microsoft heeft kwetsbaarheden verholpen in Windows.

    Microsoft IETF
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 6.9
    CVE-2025-27371

    In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication m…

    IETF RFC 7523
  • Medium 5.3
    CVE-2024-7596

    Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet

    Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and oth…

    IETF draft-ietf-intarea-gue-09
  • Medium 5.3
    CVE-2024-7595 Public exploit

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network…

    IETF RFC2784 - Generic Routing Encapsulation (GRE)
  • Medium 5.4
    CVE-2025-23018

    IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a net…

    IETF IPv6
  • Medium 5.4
    CVE-2025-23019

    IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.

    IETF IPv6
  • Critical 9.0
    CVE-2024-3596 Public exploit EPSS 15%

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

    IETF RFC krb5 freeradius Debian Ubuntu Alpine
  • High 7.6
    CVE-2024-3661 Public exploit

    DHCP routing options can manipulate interface-based VPN traffic

    DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …

    IETF DHCP openvpn libreswan Ubuntu
  • Medium 4.7
    CVE-2021-27862

    L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard-08
  • Medium 4.7
    CVE-2021-27861

    L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)

    IETF IEEE 802.2 P802.1Q
  • Medium 4.7
    CVE-2021-27854

    L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard
  • Medium 4.7
    CVE-2021-27853

    L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

    Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard
  • Unscored —
    CVE-2020-10136 Public exploit EPSS 29%

    IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

    IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packet…

    IETF RFC2003 - IP Encapsulation within IP