Advisories · Technology

Netgate pfSense CE.

Every CVE that names Netgate pfSense CE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111233 CVE record

CVSS 2.3 Low

Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-111232 CVE record

CVSS 4.8 Medium

Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-111230 CVE record

CVSS 6.9 Medium

Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL
- Netgate pfSense CE
- Path traversal
Not analysed yet 15 Oct 2026
CVE-2026-111228 CVE record

CVSS 5.1 Medium

Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
- Netgate pfSense CE
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-111227 CVE record

CVSS 5.1 Medium

Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php
- Netgate pfSense CE
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-111226 CVE record

CVSS 8.6 High

Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111225 CVE record

CVSS 2.3 Low

Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111224 CVE record

CVSS 7.7 High

Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111223 CVE record

CVSS 8.6 High

Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner
- Netgate pfSense CE
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-111222 CVE record

CVSS 7.5 High

Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting
- Netgate pfSense CE
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-111220 CVE record

CVSS 8.6 High

Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
- Netgate pfSense CE
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-111219 CVE record

CVSS 7.5 High

Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username
- Netgate pfSense CE
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-111218 CVE record

CVSS 8.6 High

Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111217 CVE record

CVSS 8.6 High

Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111216 CVE record

CVSS 8.6 High

Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111215 CVE record

CVSS 8.6 High

Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-111214 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php
- Netgate pfSense CE
- Command injection
Not analysed yet 15 Oct 2026
CVE-2026-97730 CVE record

CVSS 8.5 High

Path traversal in Netgate pfSense Plus and others
- Netgate pfSense Plus
- Netgate pfSense CE
- Path traversal
Not analysed yet 25 Sept 2026
CVE-2026-56128 CVE record

CVSS 5.1 Medium

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-56127 CVE record

CVSS 5.1 Medium

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-56126 CVE record

CVSS 5.1 Medium

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-67189 CVE record

CVSS 5.3 Medium

pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 19 Aug 2026
CVE-2025-34178 CVE record

CVSS 5.1 Medium

Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025
CVE-2025-34177 CVE record

CVSS 5.1 Medium

Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025
CVE-2025-34176 CVE record

CVSS 5.3 Medium

Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure
- Netgate pfSense CE
- Path traversal
Not analysed yet 9 Sept 2025
CVE-2025-34175 CVE record

CVSS 5.1 Medium

Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025
CVE-2025-34174 CVE record

CVSS 5.1 Medium

Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025
CVE-2025-34173 CVE record

CVSS 5.3 Medium

Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure
- Netgate pfSense CE
- Path traversal
Not analysed yet 9 Sept 2025
CVE-2025-34172 CVE record

CVSS 4.8 Medium

Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025