What is CVE-2025-34116?

CVE-2025-34116 is a vulnerability in Ipfire Project, classified under Improper Input Validation. Published 2025-07-15.

Is CVE-2025-34116 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Ipfire Project

CVE-2025-34116

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.011 (63.3th percentile) — read the EPSS interpretation.

Affected products

Ipfire Project — versions 0

Weakness classification (CWE)

Public proof-of-concept exploits

rapid7/metasploit-framework

References

disclosure@vulncheck.com (vendor-advisory, patch)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (technical-description, third-party-advisory)
disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2025-34116?: CVE-2025-34116 is a vulnerability in Ipfire Project, classified under Improper Input Validation. Published 2025-07-15.
Is CVE-2025-34116 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.