<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>9front Systems — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/9front" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by 9front Systems (9front).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/9front.png</url>
      <title>9front Systems — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-9054 · 9.2 CRITICAL 🌩️ — Invalid IP packets cause a kernel panic</title>
      <link>https://vulnogram.org/CVE-2026-9054</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-9054</guid>
      <description>An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 22 May 2026 03:21:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-9053 · 6.9 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-9053</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-9053</guid>
      <description>Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 22 May 2026 02:57:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-8158 · 8.8 HIGH — User impersonation for lib9p based 9p fileservers</title>
      <link>https://vulnogram.org/CVE-2024-8158</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-8158</guid>
      <description>A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user. This is due to lib9p not properly verifying that the uname giv…</description>
      <category>High</category>
      <pubDate>Sun, 25 Aug 2024 21:31:08 GMT</pubDate>
    </item>
  </channel>
</rss>
