FFirebirdSQL

Products

Exploited and recent CVEs

• CVE-2026-40342 Critical 10.0 Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution 0.7%
• CVE-2026-35215 High 7.5 Firebird: DoS via malicious slice descriptor in slice packet 0.5%
• CVE-2026-34232 High 7.5 Firebird: DoS via `op_response` packet from client 0.5%
• CVE-2026-33337 High 7.5 Firebird has a buffer overflow when parsing corrupted slice packets 0.5%
• CVE-2026-28224 High 8.2 Firebird Null Pointer Dereference via CryptCallback causes DOS 0.5%
• CVE-2026-28214 Medium 6.0 Firebird server hangs when using specific clumplet on batch creation 1.1%
• CVE-2026-27890 High 8.2 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments 0.5%
• CVE-2026-28212 High 7.5 Firebird has potential server crash via null pointer dereference when processing op_slice packet 0.5%
• CVE-2025-65104 High 7.9 Firebird: Information leak vulnerability in firebird3 client when used with newer server 0.2%
• CVE-2025-24975 High 7.1 Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External 0.6%
• CVE-2025-54989 Medium 5.3 Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability 0.7%
• CVE-2023-41038 High 7.5 Server crash when using specific form of SET BIND statement 0.7%