Buffer Overflow Vulnerability in FreeBSD Kernel Affecting Unprivileged Users
CVE-2026-7270

7.8HIGH

Key Information:

Vendor

FreeBSD

Status
FreeBSD
Vendor
CVE Published:
30 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-7270?

A vulnerability exists in the FreeBSD kernel due to an operator precedence issue, which can lead to a buffer overflow. This flaw allows attacker-controlled data to overwrite adjacent argument buffers used in execve(2) calls. An unprivileged user could potentially exploit this vulnerability to escalate their privileges to superuser level, thereby compromising the system's security and integrity.

Affected Version(s)

FreeBSD 15.0-RELEASE

FreeBSD 14.4-RELEASE

FreeBSD 14.3-RELEASE

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

freebsd-CVE-2026-7270
Created by babyshen

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:13....
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ryan Austin of Calif.io
.