Freeradius

FreeRADIUS is a widely embedded open-source authentication and access-control server that sits in the critical path of network access decisions across enterprise networks, ISPs, and service providers, despite its narrow product line. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity; the exposure recurs in the core FreeRADIUS server and its PAM integration through weakness classes including memory buffer violations, improper authentication logic, and out-of-bounds reads and writes that reflect the parsing and state-management demands of the RADIUS protocol implementation. The structural importance of RADIUS to network access infrastructure means that flaws in this vendor can affect authentication and authorization mechanisms across an entire organization's edge and internal systems. Defenders should treat FreeRADIUS updates as high-priority for any deployment that handles network access control, and should inventory dependent systems that rely on this authentication service; live exploitation and severity counts are shown alongside this summary.