CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

PT-2026-68628

Name of the Vulnerable Software and Affected Versions Packetfence version 13.2.0 Description The WebGui interface setting allows an authenticated user to perform remote code execution, which is the ability to execute arbitrary commands on the host machine. Recommendations At the moment, there is ...

CVE-2024-39024

In Packetfence 13.2.0 , an authenticated remote code execution (RCE) vulnerability exists within the WebGui interface setting. The root cause is located in Interface.pm at line 64 within the create function, where the $vlan_id variable—derived from user input—is only validated on the client side....