9front: CVE Program partner

CVEs, 365 days23 all time, 0 rejected

Quality66%median 99%

CVSS by the CNA100%share of records

CWE0%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	9front Systems
Role	CNA
Type	Open Source
Reports to	mitre
Scope	All software produced as part of the Plan9front open source operating system, as well as its applications and cyberinfrastructure. Vulnerabilities discovered by or reported to 9front Systems for all Plan 9 software not covered by the scope of another CNA.
Advisories	http://bugs.9front.org/

CVE-2026-9054 2026-05-22 · CVSS 9.2
An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.
CVE-2026-9053 2026-05-22 · CVSS 6.9
Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and th
CVE-2024-8158 2024-08-25 · CVSS 8.8
A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any o

9front