CVE-2017-9148

CVE-2017-9148 describes an authentication bypass vulnerability in the TLS session cache of FreeRADIUS versions 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04. This critical flaw, with a CVSS score of 9.8, allows remote attackers to bypass authentication via PEAP or TTLS by reliably resuming unauthenticated sessions. While the vulnerability has a high FAUCET Risk Score of 80/100 and has received media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. Community discussion is minimal, suggesting limited public awareness or active development of exploits.