BSD Security

FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege

FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege

Do Son May 4, 2026

FreeBSD warns of CVE-2026-42511: a critical dhclient flaw allowing rogue DHCP servers to execute code as root via BOOTP file injection. Patch and reboot now!

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-116606CVSS 9.3
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
Admin intel📅 Updated: Nov 10, 2026
CVE-2026-125350
Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
Admin intel📅 Updated: Nov 10, 2026
CVE-2026-123751CVSS 9.8
The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
Watchtower Verified📅 Updated: Nov 9, 2026
CVE-2026-111793CVSS 4.3
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
Admin intel📅 Updated: Nov 9, 2026
CVE-2026-114713CVSS 8.6
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
Admin intel📅 Updated: Nov 9, 2026
CVE-2026-116779CVSS 9.8
Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
CISA KEV📅 Added to KEV: Nov 9, 2026
CVE-2026-102895CVSS 9.8
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
CISA KEV📅 Added to KEV: Nov 9, 2026
CVE-2026-123158CVSS 8.1
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
CISA KEV📅 Added to KEV: Nov 9, 2026

CVE-2026-103848CVSS 9.9
Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS...
📅 Updated: Nov 10, 2026
CVE-2026-92909CVSS 9.8
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the...
📅 Updated: Nov 10, 2026
CVE-2026-91013CVSS 9.3
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker...
📅 Updated: Nov 10, 2026
CVE-2026-91354CVSS 9.9
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK)....
📅 Updated: Nov 10, 2026
CVE-2026-91323CVSS 9.8
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected...
📅 Updated: Nov 10, 2026
CVE-2024-5535CVSS 9.1
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a...
📅 Updated: Nov 10, 2026
CVE-2026-69043CVSS 9.1
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory...
📅 Updated: Nov 10, 2026
CVE-2026-69050CVSS 9.8
Out-of-bounds memory access in a device driver due to improper resource state tracking.
📅 Updated: Nov 10, 2026