Free
free
7 CVEs • 16 products
Products (16)
Click to collapseToggle
Products (16)
Click to collapse
CVEs (7)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Free 2Freebox Server Freebox V5 FirmwareJun 17, 2026 Oct 19, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
1Free 5Freebox Delta Firmware Freebox Mini FirmwareFreebox One Firmware+2 moreJun 17, 2026 Sep 16, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3. |
1Free 5Freebox Delta Firmware Freebox Mini FirmwareFreebox One Firmware+2 moreJun 17, 2026 Sep 16, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3. |
1Free 1Freebox Hd Firmware Jun 17, 2026 Sep 16, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 A DNS rebinding vulnerability in Freebox v5 before 1.5.29. |
1Free 5Freebox Delta Firmware Freebox Mini FirmwareFreebox One Firmware+2 moreJun 17, 2026 Sep 16, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation |
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code. |