Skip to content
OpenAdvisories

Product · IPFire.org

IPFire

18 known vulnerabilities.

IPFire at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 2025180
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • High 8.7
    CVE-2025-34311 EPSS 13%

    IPFire < v2.29 Command Injection via Proxy Report Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. When a user creates a Prox…

    IPFire.org IPFire
  • High 8.7
    CVE-2025-34312

    IPFire < v2.29 Command Injection via URL Filter Blacklist

    IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the 'nobody' user via the BE_NAME parameter when installing a blacklist. When a blacklist is insta…

    IPFire.org IPFire
  • High 7.1
    CVE-2025-34304

    IPFire < v2.29 SQL Injection via OpenVPN Connection Logs

    IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTION_NAME parameter. When viewing a range of OpenVP…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34307

    IPFire < v2.29 Stored XSS via Default Country Search

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the firewall country search defau…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34306

    IPFire < v2.29 Stored XSS via Default IP Search Value

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the default firewall IP search va…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34308

    IPFire < v2.29 Stored XSS via Default Time Sync

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the UPDATE_VALUE parameter when updating the default time synchronizati…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34318

    IPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME, UPSTREAM_USER, UPSTREAM_PASSWORD, ADMIN_MAIL_ADDRESS,…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34317

    IPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME parameter when adding a new DNS entry. When a user add…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34309

    IPFire < v2.29 Stored XSS via Dynamic DNS Host

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SERVICE, LOGIN, and PASSWORD parameters when creating or editing a …

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34301

    IPFire < v2.29 Stored XSS via Location Group Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code into the COUNTRY_CODE parameter when creating a location group. When a user add…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34316

    IPFire < v2.29 Stored XSS via Mail Server Settings

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the txt_mailuser and txt_mailpass parameters when updating the mail ser…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34305

    IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()

    IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function (/var/ipfire/header.pl) that fails to apply HTML-entity encoding to user input. When an authenticate…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34310

    IPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the INC_SPD, OUT_SPD, DEFCLASS_INC, and DEFCLASS_OUT parameters when up…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34315

    IPFire < v2.29 Stored XSS via Remote Syslog Server Address

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the REMOTELOG_ADDR parameter when updating the remote syslog server add…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34302

    IPFire < v2.29 Stored XSS via Service Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the PROT parameter when creating a new service. When a user adds a serv…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34314

    IPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SRC, DST, and COMMENT parameters when creating a time constraint ru…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34313

    IPFire < v2.29 Stored XSS via User Quota Rule URL Filter

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the QUOTA_USERS parameter when creating a user quota rule. When a user …

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34303

    IPFire < v2.29 Stored XSS via Whitelisted Host Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the IGNORE_ENTRY_REMARK parameter when adding a whitelisted host. When …

    IPFire.org IPFire