https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:14:29.504822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-34116 CVE-2025-34116 — IPFire < 2.19 Core Update 101 proxy.cgi RCE 2026-10-16T14:14:29.519482+00:00

Affected: IPFire Project IPFire

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges.