PT-2026-42402 · Cap Net+1 · Cap Net+1

Joshua Rogers · Published 2026-05-21 · Updated 2026-05-22 · CVE-2026-45254

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions cap net service (affected versions not specified)

Description An issue exists in the cap net service where omitting a key from a new limit that was present in the old limit causes the missing key to be treated as allow any instead of being rejected. This allows an application that previously had restricted network operations to request a new limit that extends the process permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-45254

Affected Products

Freebsd

Cap Net

References · 6

• https://security.freebsd.org/advisories/FreeBSD-SA-26:24.cap_net.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45254 · Security Note
• https://twitter.com/midnightbsd/status/2057839142197703048 · Twitter Post
• https://reddit.com/r/freebsd/comments/1tjaceg/20260520_freebsd_errata_notice_and_seven_security · Reddit Post
• https://freebsd.org/security/advisories/FreeBSD-SA-26:24.cap_net.asc · Note
• https://t.me/CVEtracker/54494 · Telegram Post