Insufficient Logging in FreeBSD - CVE-2026-49426
Published: July 1, 2026
Vulnerability identifier: #VU136016
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-49426
CWE-ID: CWE-778
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: FreeBSD Foundation
Affected software:
FreeBSD
FreeBSD
Detailed vulnerability description
The vulnerability allows a local user to produce misleading audit trails.
The vulnerability exists due to incorrect audit record generation in the audit(4) facility for ptrace(2) PT_SC_REMOTE syscall auditing when recording the outcome of remotely executed system calls. A local user can debug a process and execute system calls via ptrace(PT_SC_REMOTE) to produce misleading audit trails.
Only systems using audit(4) are affected, and the issue can undermine audit-based intrusion detection systems.
How to mitigate CVE-2026-49426
Install security update from vendor's website.