CVE-2025-34116CWE-20CWE-306CWE-78

IPFire < 2.19 Core Update 101 proxy.cgi RCE

High · published July 15, 2025

CVSS v4.0
8.7
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01943 · 80.0th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-306 · Missing Authentication for Critical Function; CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-07-15T13:02Z
EPSS history
Timeline
  • 15 JUL 13:02Z
    IPFire < 2.19 Core Update 101 proxy.cgi RCE
    cvelistv5