← Back

Free

free

7 CVEs • 16 products

Products (16)

Click to collapse
Toggle

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Free
2Freebox Server
Freebox V5 Firmware
Jun 17, 2026
Oct 19, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
1Free
5Freebox Delta Firmware
Freebox Mini FirmwareFreebox One Firmware+2 more
Jun 17, 2026
Sep 16, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.
1Free
5Freebox Delta Firmware
Freebox Mini FirmwareFreebox One Firmware+2 more
Jun 17, 2026
Sep 16, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
1Free
1Freebox Hd Firmware
Jun 17, 2026
Sep 16, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
A DNS rebinding vulnerability in Freebox v5 before 1.5.29.
1Free
5Freebox Delta Firmware
Freebox Mini FirmwareFreebox One Firmware+2 more
Jun 17, 2026
Sep 16, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
1Free
1Freebox Os
Nov 21, 2024
Jan 13, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
1Free
1Freebox Os
Nov 21, 2024
Jan 6, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.