Skip to content
OpenAdvisories

Vendor

IPFire.org

18 known vulnerabilities.

Products

IPFire 18
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2025-34311 EPSS 13%

    IPFire < v2.29 Command Injection via Proxy Report Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. When a user creates a Prox…

    IPFire.org IPFire
  • High 8.7
    CVE-2025-34312

    IPFire < v2.29 Command Injection via URL Filter Blacklist

    IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the 'nobody' user via the BE_NAME parameter when installing a blacklist. When a blacklist is insta…

    IPFire.org IPFire
  • High 7.1
    CVE-2025-34304

    IPFire < v2.29 SQL Injection via OpenVPN Connection Logs

    IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTION_NAME parameter. When viewing a range of OpenVP…

    IPFire.org IPFire