PatchTheCVEfreeflow core vulnerabilities and fixes
Recent CVEs affecting freeflow core, with upgrade or downgrade steps. 8 tracked.
Also searched as: freeflowcore.
freeflow core has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-02-27. Highest priority: CVE-2025-8356 (score 70/100).
- CVE-2026-2252 HIGH 7.5 UPGRADE An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF)
- CVE-2026-2251 CRITICAL 9.8 UPGRADE Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow C
- CVE-2025-8356 CRITICAL 9.8 DOWNGRADE In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unautho
- CVE-2025-8355 HIGH 7.5 DOWNGRADE In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities
- CVE-2024-47559 HIGH 7.6 DOWNGRADE Authenticated RCE via Path Traversal
- CVE-2024-47558 HIGH 7.6 DOWNGRADE Authenticated RCE via Path Traversal
- CVE-2024-47557 HIGH 8.3 UPGRADE Pre-Auth RCE via Path Traversal
- CVE-2024-47556 HIGH 8.3 UPGRADE Pre-Auth RCE via Path Traversal
FAQ
How do I fix freeflow core vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is freeflow core being exploited right now?
None of the tracked freeflow core CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which freeflow core CVE should I patch first?
CVE-2025-8356 currently ranks highest (70/100): In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unautho.