Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
IPFire.org

IPFire.org IPFire vulnerabilities

18 published CVEs name IPFire.org IPFire among the affected products.

Published CVEs
18
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 3Medium 15Low 0Not scored 0

Newest CVEs

  • CVE-2025-34311

    IPFire < v2.29 Command Injection via Proxy Report Creation

    IPFire.org · IPFire

    High8.7
  • CVE-2025-34312

    IPFire < v2.29 Command Injection via URL Filter Blacklist

    IPFire.org · IPFire

    High8.7
  • CVE-2025-34304

    IPFire < v2.29 SQL Injection via OpenVPN Connection Logs

    IPFire.org · IPFire

    High7.1
  • CVE-2025-34307

    IPFire < v2.29 Stored XSS via Default Country Search

    IPFire.org · IPFire

    Medium5.1
  • CVE-2025-34306

    IPFire < v2.29 Stored XSS via Default IP Search Value

    IPFire.org · IPFire

    Medium5.1
  • CVE-2025-34308

    IPFire < v2.29 Stored XSS via Default Time Sync

    IPFire.org · IPFire

    Medium5.1
  • CVE-2025-34318

    IPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)

    IPFire.org · IPFire

    Medium5.1
  • CVE-2025-34317

    IPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)

    IPFire.org · IPFire

    Medium5.1
  • CVE-2025-34309

    IPFire < v2.29 Stored XSS via Dynamic DNS Host

    IPFire.org · IPFire

    Medium5.1
  • CVE-2025-34301

    IPFire < v2.29 Stored XSS via Location Group Creation

    IPFire.org · IPFire

    Medium5.1