CVE-2026-45255

The FreeBSD operating system is vulnerable to remote code execution via a command injection flaw in the bsdinstall and bsdconfig utilities. The vulnerability exists because a shell script used to build and display Wi-Fi network names via bsddialog(1) fails to prevent shell expansion. An attacker ...