firebirdsql vulnerabilities

Recent CVEs affecting firebirdsql products. 8 tracked.

firebirdsql has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-04-17. Highest priority: CVE-2026-40342 (score 53/100).

• CVE-2026-40342 CRITICAL 9.9 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-35215 HIGH 7.5 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-27890 HIGH 8.2 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-28224 HIGH 8.2 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-33337 HIGH 7.5 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-28212 HIGH 7.5 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-34232 HIGH 7.5 UPGRADE Firebird is an open-source relational database management system
• CVE-2026-28214 MEDIUM 6.5 UPGRADE Firebird is an open-source relational database management system

FAQ

How do I fix firebirdsql vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is firebirdsql being exploited right now?

None of the tracked firebirdsql CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which firebirdsql CVE should I patch first?

CVE-2026-40342 currently ranks highest (53/100): Firebird is an open-source relational database management system.

Products

• firebird

RSS feed for firebirdsql · ← Back to latest CVEs