Approved changes feed: RSS · Atom

cpe:2.3:h:ixsystems:freenas:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorIxsystems (2a374788-4bff-50c4-a0a9-15dc3ac1afc4)
ProductFreenas (6740b970-bb3e-5145-a879-90905ff3e5bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11650 not_vulnerable 2026-06-08 05:16:47.571511 Details available
An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.
Published: 2020-04-08T22:12:46.000Z
Updated: 2024-08-04T11:35:13.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-20059 vulnerable 2026-06-08 04:54:11.198952 FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution
FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.
Published: 2025-08-20T15:35:08.532Z
Updated: 2026-05-15T11:13:29.096Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.