FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege

FreeBSD published an urgent advisory for CVE-2026-42511: a critical RCE in the default IPv4 DHCP client (dhclient) where unescaped double-quotes in the BOOTP file field allow a rogue DHCP server on the same broadcast domain to inject directives that are later executed as root. The flaw carries a CVSS 8.1, affects systems using dhclient, and has been patched across supported branches; mitigations include applying the update and using DHCP snooping on switches to block rogue servers.