Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified. resolvconf(8) is a shell script which does not validate its input. A lack of quoting meant that shell commands pass as input to resolvconf(8) may be executed.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-09 | 2 | Disclosure2 |
| 2026-03-11 | 1 | Disclosure1 |
A severe vulnerability was disclosed for FreeBSD (CVE-2025-14558) https://vuldb.com/?id.349823
Post summary
The message announces the existence of a severe CVE-2025-14558 vulnerability in FreeBSD but provides no further technical, PoC, patch, or exploitation information.
CVE-2025-14558: FreeBSD rtsold vulnerability allows root command execution via malicious IPv6 Router Advertisements (DNSSL option injection). Exploitable from the same network segment. High relevance for network infrastructure & DPI environments Analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/DPI-Threats/TIER1/TIER_1_11-03-26_CVE-2025-14558.md
Post summary
The text discloses that CVE‑2025‑14558 enables root command execution on FreeBSD through malicious IPv6 Router Advertisements, provides a link to an analysis, and details the technical nature of the vulnerability without mentioning patches or active exploitation.
CVE-2025-14558 The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(… https://www.cve.org/CVERecord?id=CVE-2025-14558
Post summary
The statement reports a new vulnerability in rtsol/rtsold regarding unsanitized domain search list options, but provides no evidence of exploitation, PoC, or patch information.
16 of 16 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 13.5 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 14.3 | - | - |
| OS | freebsd | freebsd | 15.0 | - | - |