CVE-2026-4747 - Vulnerability Analysis

Overview

FreeBSD kgssapi.ko and librpcgss_sec contain a stack buffer overflow caused by improper validation of RPCSEC_GSS data packet signatures, letting remote attackers execute code without authentication, exploit requires network access to vulnerable RPC server.

Severity & Score

Impact

Remote attackers can execute arbitrary code in kernel or userspace, potentially leading to full system compromise.

Mitigation

Update to the latest FreeBSD version with patched kgssapi.ko and librpcgss_sec modules.

References

• https://security.freebsd.org/advisories/FreeBSD-SA-26:08.rpcsec_gss.asc

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner