1. Home
  2. CVE Database
  3. CVE-2026-45254
MEDIUM · 6.5

CVE-2026-45254

In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected. In certain scenarios, an ...

Vulnerability Description

In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected. In certain scenarios, an application that had previously restricted a subset of network operations could ask for a new limit that extended the permissions of the process.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
FreebsdFreebsd14.3

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2026-45254?

CVE-2026-45254 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected. In certain scenarios, an ...

How severe is CVE-2026-45254?

CVE-2026-45254 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-45254?

Check the references section above for vendor advisories and patch information. Affected products include: Freebsd Freebsd.