Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2024-39024: Packetfence WebGui Remote Code Execution Vulnerability
CVE-2024-39024 · published 3 months ago
Summary
Packetfence's WebGui interface has a security weakness that allows attackers to execute malicious code on a vulnerable system. This could allow an attacker to gain unauthorized access to sensitive data or take control of the system. Users should update to the latest version of Packetfence to fix this issue.
Original advisory text
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.8
High
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published6 Aug 2026
Updated4 Nov 2026
First seen6 Aug 2026
Sources
CVE-2024-39024 · NVD
Track software like this
Free during beta