ipfire ipfire

Name: ipfire ipfire
Brand: ipfire

productUS

cpe:2.3:a:ipfire:ipfire:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high19medium0low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-33393US	high8.8OT high	59.3% (99th)	Exploit	2.25	2021-06-09	2 versions
CVE-2017-9757US	high8.8	37.4% (99th)	Exploit	no fix	2017-06-19	≤ 2.19
CVE-2025-34311US	high8.8	13.5% (96th)	—	2.29	2025-10-28	2 versions
CVE-2018-16232US	high8.8	7.79% (95th)	—	no fix	2018-10-17	8 versions
CVE-2025-34309US	medium5.4	5.32% (93rd)	—	2.29	2025-10-28	2 versions
CVE-2025-34301US	medium5.4	5.32% (93rd)	—	2.29	2025-10-28	2 versions
CVE-2025-34312US	high8.8	2.24% (83rd)	—	2.29	2025-10-28	2 versions
CVE-2022-36368US	medium4.8	0.93% (60th)	—	2.27	2022-10-24	2 versions
CVE-2020-19204US	medium5.4	0.74% (54th)	—	no fix	2021-07-12	= 2.21
CVE-2020-21142US	medium6.1	0.69% (52nd)	—	no fix	2021-06-28	= 2.23
CVE-2020-19202US	medium5.4	0.57% (47th)	—	no fix	2021-06-17	= 2.21
CVE-2025-34317US	medium5.4	0.48% (41st)	—	no fix	2025-10-28	2 versions
CVE-2025-34316US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34315US	medium5.4	0.48% (42nd)	—	2.29	2025-10-28	2 versions
CVE-2025-34314US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34313US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34310US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34308US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34307US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34306US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34305US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34303US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34302US	medium5.4	0.48% (41st)	—	2.29	2025-10-28	2 versions
CVE-2025-34304US	medium6.5	0.41% (36th)	—	2.29	2025-10-28	2 versions
CVE-2025-50974US	—	0.40% (34th)	—	no fix	2025-08-26	= 2.29
CVE-2019-25398US	—	0.29% (21st)	—	no fix	2026-02-18	= 2.21
CVE-2019-25397US	—	0.29% (21st)	—	no fix	2026-02-18	= 2.21
CVE-2019-25396US	—	0.29% (21st)	—	no fix	2026-02-18	= 2.21
CVE-2025-50975US	—	0.28% (21st)	—	no fix	2025-08-26	= 2.29
CVE-2019-25399US	—	0.27% (19th)	—	no fix	2026-02-18	= 2.21
CVE-2019-25400US	—	0.25% (16th)	—	no fix	2026-02-18	= 2.21
CVE-2025-50976US	—	0.23% (14th)	—	no fix	2025-08-26	= 2.29

weaknesses (5)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')25 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan