cve-2026-4747

Latest stories covering cve-2026-4747, with summaries and links to related coverage.

1 articles · page 1 of 1

• Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)

  2026-04-01

  research

  14 min read

  CVE-2026-4747 affects FreeBSD versions 13.5, 14.3, 14.4, and 15.0, specifically when the NFS server with kgssapi.ko loaded is utilized. The vulnerability arises in the svc_rpc_gss_validate() function, which improperly reconstructs an RPC header into a 128-byte stack buffer for GSS-API signature verification.

  freebsdsecurity-vulnerabilitiesrpc-protocol