PatchTheCVECVE-2026-4748: A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y
CVE-2026-4748 is a high-severity flaw (CVSS 7.5) affecting freebsd. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the address[/mask-bits] syntax were not affected. Some keywords representing actions taken on a packet-matching rule, such as 'log', 'return tll', or 'dnpipe', may
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-4748?
freebsd: upgrade to 14.4. Exact commands for each OS are on this page.
Is CVE-2026-4748 being exploited?
CVE-2026-4748 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-4748 affect?
CVE-2026-4748 affects freebsd. Severity is high (CVSS 7.5). A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently dropped as duplicates. Only the first of such rules is act
How urgent is CVE-2026-4748?
Priority 35/100. High severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-58082 CRITICAL 9.8 MITIGATE The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character outp
- CVE-2026-58081 CRITICAL 9.8 MITIGATE Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-sup
- CVE-2026-58085 HIGH 7.5 MITIGATE After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whethe
- CVE-2026-58086 HIGH 8.1 MITIGATE As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user
- CVE-2026-58083 HIGH 8.4 MITIGATE While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued