Vulnerabilities
All advisories, bugs and issues
Every FreeBSD security advisory since 2025 and every FreeSense bug and issue, newest first. Advisories have a decision for each FreeSense version; bugs and issues link to GitHub.
Version
87 entries
EntryComponentStatusVersionsDate
Security reportfreesense#199Security audit 2026-10-17: captive portal file write, CSRF bypass, XML-RPC exec privilegeOpens on GitHubfreesenseClosedNot tied to a versionSecurity reportfreesense#194Security audit: CSRF gap on GET state change, legacy MD5 passwords, unsafe unserialize defaultsOpens on GitHubfreesenseClosedNot tied to a versionFreeBSD advisorySA-26:72.bhyveMultiple vulnerabilities in bhyve device modelsCVE-2026-101309, CVE-2026-101310, CVE-2026-101311bhyveNot relevantauto1.0–Not relevant1.1–Not relevant1.2–Not relevantFreeBSD advisorySA-26:71.soundTOCTOU race between sound(4) buffer resizing and mmapCVE-2026-101308soundOpenauto1.0!Open1.1!Open1.2!OpenFreeBSD advisorySA-26:70.tcpRemotely triggerable buffer overflow in tcp_rackCVE-2026-101307tcp_rackOpenauto1.0!Open1.1!Open1.2!OpenFreeBSD advisorySA-26:69.udpIPv6 UDP sendto(2) bypasses jail loopback restrictionCVE-2026-101303udpOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:68.opensslOut-of-bounds read in OpenSSL DTLS retransmissionCVE-2026-84782opensslOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:67.ktlsRemote DoS via receive-side kernel TLSCVE-2026-101302ktlsOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:66.jailMultiple jail filesystem root escapesCVE-2026-101304, CVE-2026-101305, CVE-2026-101306jailOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:65.kqueueMemory safety bugs in kqueue copy-on-fork implementationCVE-2026-58099, CVE-2026-58100kqueueOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:64.sysvsemHeap out-of-bounds access in semop(2)CVE-2026-58098sysvsemOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:63.posixshmTOCTOU race in POSIX shared memory large page configurationCVE-2026-58094posixshmOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:62.ttyKernel use-after-free via tty ioctlsCVE-2026-58093ttyOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:61.opensslMultiple vulnerabilities in OpenSSLCVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076opensslOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:60.pppMultiple vulnerabilities in ppp(8)CVE-2026-58095, CVE-2026-58096, CVE-2026-58097pppOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:59.mac_doUnauthorized credential switchingCVE-2026-58092mac_doOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:58.soundKernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctlCVE-2026-58091soundOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:57.unixUse-after-free in unix SOCK_STREAM message handlingCVE-2026-58090unixOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:56.hwpmchwpmc fails to detach PMCs during exec credential transitionsCVE-2026-58089hwpmcOpenauto1.0!Open1.1✓Fixed1.2✓FixedIssuefreesense#42Architectural Proposal: Gradual Rewrite of OPNsense and Pfsense in GoOpens on GitHubfreesenseNot plannedNot tied to a versionFreeBSD advisorySA-26:55.elfRace condition in ELF core dump segment countingCVE-2026-58088elfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:54.sysvsemHeap out-of-bounds access in semctl(2)CVE-2026-58087sysvsemFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:53.ktracektrace(2) privilege incorrectly validated in jailsCVE-2026-58086ktraceFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:52.if_wgMissing MAC validation in wg(4) packet decryptionCVE-2026-58085if_wgFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:51.ktimerKernel stack disclosure via timer_settime(2)CVE-2026-58084ktimerFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:50.kqueueUse-after-free in kqueue copy-on-forkCVE-2026-58083kqueueFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:49.iconvMultiple vulnerabilities in iconv(3)CVE-2026-58081, CVE-2026-58082iconvFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:48.compat32Kernel stack disclosure in 32-bit compatibility supportCVE-2026-49425kernel compat32Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:47.linuxKernel stack disclosure in Linux compatibility layerCVE-2026-49424linux(4)Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:46.ktlsRemote DOS via uninitialized memory access in KTLS receiveCVE-2026-49423ktlsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:45.auditIncorrect audit records for ptrace(2) syscall requestsCVE-2026-49426auditFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:44.posixshmMultiple vulnerabilities in POSIX largepage objectsCVE-2026-49427, CVE-2026-49428posixshmFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:43.tcpUse-after-free in TCP RACK stack option handlerCVE-2026-49422tcpFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:42.unlinkatunlinkat(2) ignores AT_RESOLVE_BENEATH flagCVE-2026-49421unlinkatFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:41.libaliasBuffer overflow in libalias RTSP handlerCVE-2026-49420libaliasFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:40.zfsMultiple vulnerabilities in OpenZFSCVE-2026-49429, CVE-2026-49430, CVE-2026-49431openzfsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:39.execveLocal privilege escalation via execve(2) TOCTOU raceCVE-2026-49415execveFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:38.jailJail reference count underflowCVE-2026-49419jailFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:37.vmUse-after-free in device pager page listCVE-2026-49418vmFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:36.ldnsInsufficient response validation in the ldns stub resolverCVE-2026-10846ldnsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:35.opensslMultiple vulnerabilities in OpenSSLCVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447opensslFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:34.vtInteger overflow in vt(4) CONS_HISTORY ioctlCVE-2026-49416vtFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:33.unboundMultiple vulnerabilities in unboundCVE-2026-32792, CVE-2026-33278, CVE-2026-40622, CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-42944, CVE-2026-42959, CVE-2026-42960, CVE-2026-44390, CVE-2026-44608unboundFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:32.elfASLR bypass for setuid executables via procctl(2)CVE-2026-49414kernelFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:31.arm64Arm CPU errata may bypass page table permission changesCVE-2025-10263arm64Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:30.linuxFlaw in Linuxulator execution of setugid binariesCVE-2026-49413linuxFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:29.ip6_multicastUse-after-free bug in the IPV6_MSFILTER socket option handlerCVE-2026-49412ip6_multicastFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:28.capsicumsigqueue(2) missing capability mode restrictionCVE-2026-45259capsicumFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:27.soundMultiple vulnerabilities in the sound(4) mmap pathCVE-2026-45258, CVE-2026-49417soundFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:26.ktlsArbitrary file overwrite via the KTLS receive pathCVE-2026-45257ktlsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:25.thrMissing permission check in thr_kill2(2)CVE-2026-45256thrFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:24.cap_netIncorrect libcap_net limitation list manipulationCVE-2026-45254libcap_netFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:23.bsdinstallRemote code execution via installer Wi-Fi access point scansCVE-2026-45255bsdinstallFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:22.libcasperselect(2) file descriptor set overflow causes stack overflowCVE-2026-39461libcasperFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:21.ptraceMissing validation in ptrace(PT_SC_REMOTE)CVE-2026-45253ptraceFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:20.fusefsHeap overflow in FUSE_LISTXATTRCVE-2026-45252fusefsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:19.fileKernel use-after-free via file descriptor syscallsCVE-2026-45251fileFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:18.setcredStack buffer overflow via setcred(2)CVE-2026-45250setcredFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:17.libnvHeap overflow in libnvCVE-2026-35547libnvFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:16.libnvStack overflow via select() file descriptor set overflowCVE-2026-39457libnvFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:15.dhclientRemotely triggerable out-of-bounds heap write in dhclientCVE-2026-42512dhclientFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:14.pfpf can overflow the stack parsing crafted SCTP packetsCVE-2026-7164pfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:13.execLocal privilege escalation via execve()CVE-2026-7270execve(2)Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:12.dhclientRemote code execution via malicious DHCP optionsCVE-2026-42511dhclientFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:11.amd64Missing large page handling in pmap_pkru_update_range()CVE-2026-6386amd64Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:10.ttyKernel use-after-free bug in the TIOCNOTTY handlerCVE-2026-5398ttyFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:08.rpcsec_gssRemote code execution via RPCSEC_GSS packet validationCVE-2026-4747rpcsec_gssFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:07.nvmfRemote denial of service via null pointer dereferenceCVE-2026-4652nvmfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:06.tcpTCP: remotely exploitable DoS vector (mbuf leak)CVE-2026-4247tcpFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:09.pfpf silently ignores certain rulesCVE-2026-4748pfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:05.routeLocal DoS and possible privilege escalation via routing socketsCVE-2026-3038routeFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:04.jailJail chroot escape via fd exchange with a different jailCVE-2025-15576jailFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:03.blocklistdblocklistd(8) socket leakCVE-2026-2261blocklistdNot relevantauto1.0–Not relevant1.1–Not relevant1.2–Not relevantFreeBSD advisorySA-26:02.jailJail escape by a privileged user via nullfsCVE-2025-15547jailFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:01.opensslMultiple vulnerabilities in OpenSSLCVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796opensslFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:12.rtsoldRemote code execution via ND6 Router AdvertisementsCVE-2025-14558rtsoldFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:11.ipfwipfw denial of serviceCVE-2025-14769ipfwFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:10.unboundCache poison in local-unbound serviceCVE-2025-11411unboundFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:09.netinetSO_REUSEPORT_LB breaks connect(2) for UDP socketsCVE-2025-24934netinetFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:08.opensslMultiple vulnerabilities in OpenSSLCVE-2025-9230, CVE-2025-9231, CVE-2025-9232opensslFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:07.libarchiveInteger overflow in libarchive leading to double freeCVE-2025-5914libarchiveFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:06.xzUse-after-free in multi-threaded xz decoderCVE-2025-31115xzFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:05.opensshMultiple vulnerabilities in OpenSSHCVE-2025-26465, CVE-2025-26466opensshFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:04.ktraceUninitialized kernel memory disclosure via ktrace(2)CVE-2025-0662ktraceFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:03.etcupdateUnprivileged access to system filesCVE-2025-0374etcupdateFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:02.fsBuffer overflow in some filesystems via NFSCVE-2025-0373fsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:01.opensshOpenSSH Keystroke Obfuscation BypassCVE-2024-39894opensshFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedNothing matches these filters.