CVE-2025-34116 HIGH

CVE-2025-34116: IPFire < 2.19 Core Update 101 proxy.cgi RCE

Vendor Ipfire Project
Product IPFire
Weakness CWE-78
Published July 15, 2025
Last update May 15, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges.

Key dates

02Disclosure timeline

July 15, 2025 CVE published
May 15, 2026 Record updated