Security Advisory

CVE-2025-34116

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-15 13:02:31

Last updated 2026-05-15 11:14:46

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges.

← Browse all CVEs View on cve.org ↗