CVE Tools
Track your stack

Ipfire-org

18 CVEs tracked since 2025. Since Oct 2025, none of them reached CISA KEV.

Ipfire-org CVEs per month

Oct 2025 to Oct 2025. Point at a month, or focus the strip and use the arrow keys.
Ipfire-org CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-10180

Products

The products that kept showing up in Ipfire-org's monthly top three, with their CVEs summed over those months.

  1. Ipfire181 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Ipfire-org.

  1. CVE-2025-34311IPFire < v2.29 Command Injection via Proxy Report Creation8.8
  2. CVE-2025-34312IPFire < v2.29 Command Injection via URL Filter Blacklist8.8
  3. CVE-2025-34304IPFire < v2.29 SQL Injection via OpenVPN Connection Logs6.5
  4. CVE-2025-34307IPFire < v2.29 Stored XSS via Default Country Search5.4
  5. CVE-2025-34306IPFire < v2.29 Stored XSS via Default IP Search Value5.4
  6. CVE-2025-34308IPFire < v2.29 Stored XSS via Default Time Sync5.4
  7. CVE-2025-34318IPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)—
  8. CVE-2025-34317IPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)5.4
  9. CVE-2025-34309IPFire < v2.29 Stored XSS via Dynamic DNS Host5.4
  10. CVE-2025-34301IPFire < v2.29 Stored XSS via Location Group Creation5.4
  11. CVE-2025-34316IPFire < v2.29 Stored XSS via Mail Server Settings5.4
  12. CVE-2025-34305IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()5.4
  13. CVE-2025-34310IPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings5.4
  14. CVE-2025-34315IPFire < v2.29 Stored XSS via Remote Syslog Server Address5.4
  15. CVE-2025-34302IPFire < v2.29 Stored XSS via Service Creation5.4

The record

Peak rank
#59 in Oct 2025
Busiest month shown
Oct 2025, 18 CVEs
Months with a KEV entry
0 since Oct 2025
Monthly snapshots
1 since 2025
Ipfire-org's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store