iXsystems

Products

ProductCVEsExploitedLatest
TrueNAS CORE2–Dec 30, 2024
TrueNAS SCALE1–Nov 5, 2026

Exploited and recent CVEs

  • CVE-2026-123033 High 8.3 Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes) allows an attacker on the same network segme 0.4%
  • CVE-2024-11946 Low 3.1 iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability 0.3%
  • CVE-2024-11944 High 7.5 iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability 1.6%