FreeBSD vulnerabilities: known CVEs & security history
FreeBSD · OS / Unix · 77 tracked CVEs · 1 actively exploited · updated November 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all FreeBSD release lines — 77 in total, with 1 actively exploited in the wild. A CVE here doesn't mean your version is affected — check FreeBSD's current status and the safe version to run.
Known FreeBSD CVEs
Actively-exploited and most-severe first. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2026-106931⚡ exploited | high | 7.8 | 1% | 2026 |
| CVE-2026-101306 | critical | 9.8 | 0% | 2026 |
| CVE-2026-58082 | critical | 9.8 | 1% | 2026 |
| CVE-2026-58081 | critical | 9.8 | 1% | 2026 |
| CVE-2019-12900 | critical | 9.8 | 8% | 2019 |
| CVE-2026-101307 | critical | 9.1 | 0% | 2026 |
| CVE-2026-101305 | high | 8.8 | 0% | 2026 |
| CVE-2026-58096 | high | 8.8 | 1% | 2026 |
| CVE-2026-58095 | high | 8.8 | 1% | 2026 |
| CVE-2026-49427 | high | 8.8 | 0% | 2026 |
| CVE-2026-49420 | high | 8.8 | 0% | 2026 |
| CVE-2026-49419 | high | 8.8 | 0% | 2026 |
| CVE-2026-49418 | high | 8.8 | 0% | 2026 |
| CVE-2026-49415 | high | 8.8 | 0% | 2026 |
| CVE-2026-39461 | high | 8.8 | 0% | 2026 |
| CVE-2019-5596 | high | 8.8 | 1% | 2019 |
| CVE-2026-58098 | high | 8.4 | 0% | 2026 |
| CVE-2026-58083 | high | 8.4 | 0% | 2026 |
| CVE-2026-49428 | high | 8.4 | 0% | 2026 |
| CVE-2026-49422 | high | 8.4 | 0% | 2026 |
| CVE-2026-45253 | high | 8.4 | 0% | 2026 |
| CVE-2026-58092 | high | 8.1 | 0% | 2026 |
| CVE-2026-58086 | high | 8.1 | 0% | 2026 |
| CVE-2024-6387 | high | 8.1 | 100% | 2024 |
| CVE-2026-58097 | high | 7.8 | 0% | 2026 |
| CVE-2026-58094 | high | 7.8 | 0% | 2026 |
| CVE-2026-58091 | high | 7.8 | 0% | 2026 |
| CVE-2026-58090 | high | 7.8 | 0% | 2026 |
| CVE-2026-58089 | high | 7.8 | 0% | 2026 |
| CVE-2026-58087 | high | 7.8 | 0% | 2026 |
| CVE-2026-49430 | high | 7.8 | 0% | 2026 |
| CVE-2026-49429 | high | 7.8 | 0% | 2026 |
| CVE-2026-49416 | high | 7.8 | 0% | 2026 |
| CVE-2026-49414 | high | 7.8 | 0% | 2026 |
| CVE-2026-49412 | high | 7.8 | 0% | 2026 |
| CVE-2026-45258 | high | 7.8 | 0% | 2026 |
| CVE-2026-45257 | high | 7.8 | 0% | 2026 |
| CVE-2026-45251 | high | 7.8 | 0% | 2026 |
| CVE-2026-45250 | high | 7.8 | 0% | 2026 |
| CVE-2026-101303 | high | 7.5 | 0% | 2026 |
| CVE-2026-58085 | high | 7.5 | 0% | 2026 |
| CVE-2026-45255 | high | 7.5 | 0% | 2026 |
| CVE-2020-1967 | high | 7.5 | 53% | 2020 |
| CVE-2000-0916 | high | 7.5 | 6% | 2000 |
| CVE-2026-58088 | high | 7.4 | 0% | 2026 |
| CVE-2021-3450 | high | 7.4 | 18% | 2021 |
| CVE-2006-1283 | high | 7.2 | 0% | 2006 |
| CVE-2002-0062 | high | 7.2 | 0% | 2002 |
| CVE-2000-0963 | high | 7.2 | 1% | 2000 |
| CVE-2000-0993 | high | 7.2 | 2% | 2000 |
| CVE-2000-0998 | high | 7.2 | 1% | 2000 |
| CVE-2000-1013 | high | 7.2 | 0% | 2000 |
| CVE-2026-101304 | high | 7.1 | 0% | 2026 |
| CVE-2026-49421 | high | 7.1 | 0% | 2026 |
| CVE-2026-49413 | high | 7.1 | 0% | 2026 |
| CVE-2026-58100 | high | 7 | 0% | 2026 |
| CVE-2026-58099 | high | 7 | 0% | 2026 |
| CVE-2026-58093 | high | 7 | 0% | 2026 |
| CVE-2026-49417 | high | 7 | 0% | 2026 |
| CVE-2026-101302 | medium | 6.5 | 0% | 2026 |
| CVE-2026-45259 | medium | 6.5 | 0% | 2026 |
| CVE-2026-45254 | medium | 6.5 | 0% | 2026 |
| CVE-2023-48795 | medium | 5.9 | 94% | 2023 |
| CVE-2021-3449 | medium | 5.9 | 64% | 2021 |
| CVE-2019-6111 | medium | 5.9 | 58% | 2019 |
| CVE-2026-101308 | medium | 5.5 | 0% | 2026 |
| CVE-2026-58084 | medium | 5.5 | 0% | 2026 |
| CVE-2026-49425 | medium | 5.5 | 0% | 2026 |
| CVE-2026-49424 | medium | 5.5 | 0% | 2026 |
| CVE-2026-45256 | medium | 5.5 | 0% | 2026 |
| CVE-2026-45252 | medium | 5.5 | 0% | 2026 |
| CVE-2020-13434 | medium | 5.5 | 1% | 2020 |
| CVE-2019-5595 | medium | 5.5 | 0% | 2019 |
| CVE-2000-0915 | medium | 5 | 2% | 2000 |
| CVE-2026-49423 | low | 3.3 | 0% | 2026 |
| CVE-2026-49431 | low | 3.3 | 0% | 2026 |
| CVE-2026-49426 | low | 3.3 | 0% | 2026 |
Is my FreeBSD version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your FreeBSD version → · Monitor FreeBSD for new CVEs →
FreeBSD vulnerabilities — frequently asked
How many known vulnerabilities does FreeBSD have?
IsItPatched tracks 77 CVEs for FreeBSD, 1 of which is actively exploited (CISA KEV). 5 are critical-severity and 54 high-severity. These span every release line — what matters is whether the version you run is affected.
Does FreeBSD have any actively-exploited vulnerabilities?
Yes — 1 FreeBSD CVE is in CISA's Known Exploited Vulnerabilities catalog, meaning it is confirmed exploited in the wild. Patch it as a priority.
What is the most severe FreeBSD vulnerability?
Among tracked issues, CVE-2026-106931 (HIGH, CVSS 7.8), which is actively exploited, ranks highest — a OS command injection weakness.
Is FreeBSD safe to use?
It depends on the version. The latest supported FreeBSD release clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: FreeBSD security status · FreeBSD end-of-life · actively-exploited CVEs. Always verify against FreeBSD's advisories — see our disclaimer.