CWE-149 vulnerabilities

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.4%	CVE-2026-42511FreeBSD · Improper Neutralization of Quoting Syntax High8.1EPSS 0.4%2026-04-30GCVE DatabaseCVE-2026-42511 CVE-2026-42511 is a vulnerability in FreeBSD's dhclient where the BOOTP file field is written to the lease file without escaping embedded double-quotes. This allows injection of arbitrary dhclient.conf directives. When the lease file is re-parsed, such as after a system restart, attacker-controlled input can be executed by dhclient-script(8) with root privileges. A rogue DHCP server could exploit this to execute arbitrary code as root on affected systems. EPSS 0.4%Vulnerability CWE-149	GCVE Database	2026-04-30

Page 1 of 1