FreeBSD security advisory (AV26-415)

Serial number: AV26-415
Date: May 4, 2026

On April 29, 2026, FreeBSD published security advisories to address vulnerabilities in the following product:

• FreeBSD – all supported versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Heap overflow in libnv (CVE-2026-35547)
• pf can overflow the stack parsing crafted SCTP packets (CVE-2026-7164)
• Local privilege escalation via execve() (CVE-2026-7270)
• Remote code execution via malicious DHCP options (CVE-2026-42511)
• FreeBSD Security Advisories