9front vulnerabilities

🔔 Create alert RSS

Published CVEs affecting 9front products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-9054 Critical · 9.2 CWE-130 May 22, 2026

Invalid IP packets cause a kernel panic

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.

CVE-2026-9053 Medium · 6.9 CWE-434 May 22, 2026

Unrestricted Upload of File with Dangerous Type in 9front

Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.