CVE-2026-111223 Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner

Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the loginbanner field. Attackers can submit a single-line banner containing '' to escape the unquoted strongswan.con...

CVE-2026-111223 Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner

Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the loginbanner field. Attackers can submit a single-line banner containing '' to escape the unquoted strongswan.con...

algo

Algo VPN Algo VPN es un conjunto de scripts de Ansible que simplifican la configuración de una VPN personal con WireGuard e IPsec. Utiliza los valores predeterminados más seguros disponibles y funciona con proveedores de nube comunes. Consulte nuestro anuncio de lanzamiento para obtener más...

ike-scan

ike-scan Descubrir e identificar hosts IKE Servidores VPN IPsec Tabla de Contenidos Construcción e Instalación Resumen Uso Detalles de Implementación Entrada de Hosts y Requisitos de Memoria Limitación de Tasa Generación de Cookies e Identificación de Hosts Remotos Detalles de Paquetes IKE...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский Script di configurazione automatica del server VPN IPsec Configura il tuo server VPN IPsec in pochi minuti, con IPsec/L2TP, Cisco IPsec e IKEv2. Una VPN IPsec crittografa il tuo traffico di rete, in modo che nessuno tra te e il server VPN possa intercettare i...

CVE-2026-98241

A flaw was found in the Linux kernel's IPv6 IPsec XFRM networking framework. When handling TCP connection handshakes routed through an IPsec tunnel with a reduced Maximum Transmission Unit MTU, the kernel's local error-handling path incorrectly treats incomplete connection request sockets as full...

SUSE CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-98230

A flaw was found in the Linux kernel's IPsec xfrm subsystem. A local attacker can trigger repeated state deletion during cleanup, leading to a use-after-free condition where the kernel attempts to access memory that has already been released. This vulnerability may allow an attacker to achieve...

CVE-2026-98231

A flaw was found in the Linux kernel's IPsec XFRM subsystem. A race condition between device state flushing and background memory cleanup allows kernel memory to be accessed after it has already been freed. A local attacker could exploit this flaw during network device state changes to cause a...

CVE-2026-98229

A flaw was found in the Linux kernel's XFRM IPsec subsystem. During incoming packet processing, certain network receive paths can reset security context information before the system finishes handling the IPsec state. If that state is concurrently deleted, the kernel can dereference freed memory,...

CVE-2026-98370

A flaw was found in the Linux kernel's IPsec Internet Protocol Security subsystem. A local attacker can exploit this issue by submitting 32-bit compatibility requests, which triggers a race condition during message translation. This flaw leads to a use-after-free condition, potentially allowing a...

CVE-2026-98369

A flaw was found in the Linux kernel's IPsec xfrm subsystem. This flaw can lead to a Denial of Service DoS due to missing synchronization locks and device references when reinjecting transport-mode network packets through workqueues. A remote attacker could exploit this vulnerability by sending...

CVE-2026-98368

A flaw was found in the Linux kernel's IPsec Encapsulating Security Payload ESP subsystem. When transmitting network packets using zero-copy operations on out-of-place paths, the kernel modifies packet fragment structures without properly updating reference counts for managed memory pages. A loca...

CVE-2026-98364

A flaw was found in the Linux kernel's IPsec XFRM networking subsystem. A race condition occurs when creating policy bundles while a network device is concurrently removed, leading to a use-after-free condition where the kernel accesses already-freed device memory. A local attacker can exploit th...

CVE-2026-80843

A flaw was found in the Linux kernel's xfrm IPSec framework component. This vulnerability occurs when the xfrmstateconstruct function incorrectly manages memory allocations for authentication algorithms. Specifically, it can overwrite an existing allocation, leading to a memory leak. Over time,...

AZL-107739 CVE-2026-92542 affecting package moby-engine 25.0.3-20

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

DEBIAN-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

UBUNTU-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...