agentprime: netgate-pfsense-ceEvery new CVE for netgate-pfsense-ce.https://agentprime.io/CVE-2026-111233: Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.phphttps://agentprime.io/advisories/CVE-2026-111233/https://agentprime.io/advisories/CVE-2026-111233/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:32 GMTCVECVE-2026-111232: Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Colorhttps://agentprime.io/advisories/CVE-2026-111232/https://agentprime.io/advisories/CVE-2026-111232/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:32 GMTCVECVE-2026-111230: Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLhttps://agentprime.io/advisories/CVE-2026-111230/https://agentprime.io/advisories/CVE-2026-111230/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:30 GMTCVECVE-2026-111228: Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.phphttps://agentprime.io/advisories/CVE-2026-111228/https://agentprime.io/advisories/CVE-2026-111228/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:29 GMTCVECVE-2026-111227: Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.phphttps://agentprime.io/advisories/CVE-2026-111227/https://agentprime.io/advisories/CVE-2026-111227/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:26 GMTCVECVE-2026-111226: Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.phphttps://agentprime.io/advisories/CVE-2026-111226/https://agentprime.io/advisories/CVE-2026-111226/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:25 GMTCVECVE-2026-111225: Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.shhttps://agentprime.io/advisories/CVE-2026-111225/https://agentprime.io/advisories/CVE-2026-111225/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:25 GMTCVECVE-2026-111224: Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.shhttps://agentprime.io/advisories/CVE-2026-111224/https://agentprime.io/advisories/CVE-2026-111224/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:24 GMTCVECVE-2026-111223: Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Bannerhttps://agentprime.io/advisories/CVE-2026-111223/https://agentprime.io/advisories/CVE-2026-111223/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:23 GMTCVECVE-2026-111222: Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Settinghttps://agentprime.io/advisories/CVE-2026-111222/https://agentprime.io/advisories/CVE-2026-111222/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:23 GMTCVECVE-2026-111220: Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpidhttps://agentprime.io/advisories/CVE-2026-111220/https://agentprime.io/advisories/CVE-2026-111220/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:21 GMTCVECVE-2026-111219: Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Usernamehttps://agentprime.io/advisories/CVE-2026-111219/https://agentprime.io/advisories/CVE-2026-111219/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:20 GMTCVECVE-2026-111218: Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limitershttps://agentprime.io/advisories/CVE-2026-111218/https://agentprime.io/advisories/CVE-2026-111218/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:19 GMTCVECVE-2026-111217: Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHIDhttps://agentprime.io/advisories/CVE-2026-111217/https://agentprime.io/advisories/CVE-2026-111217/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:19 GMTCVECVE-2026-111216: Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IPhttps://agentprime.io/advisories/CVE-2026-111216/https://agentprime.io/advisories/CVE-2026-111216/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:18 GMTCVECVE-2026-111215: Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interfacehttps://agentprime.io/advisories/CVE-2026-111215/https://agentprime.io/advisories/CVE-2026-111215/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:17 GMTCVECVE-2026-111214: Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.phphttps://agentprime.io/advisories/CVE-2026-111214/https://agentprime.io/advisories/CVE-2026-111214/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:46:17 GMTCVEcriticalCVE-2026-97730: Path traversal in Netgate pfSense Plus and othershttps://agentprime.io/advisories/CVE-2026-97730/https://agentprime.io/advisories/CVE-2026-97730/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 02:43:13 GMTCVECVE-2026-56128: pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.phphttps://agentprime.io/advisories/CVE-2026-56128/https://agentprime.io/advisories/CVE-2026-56128/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:22:32 GMTCVECVE-2026-56127: pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.phphttps://agentprime.io/advisories/CVE-2026-56127/https://agentprime.io/advisories/CVE-2026-56127/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:21:35 GMTCVECVE-2026-56126: pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.phphttps://agentprime.io/advisories/CVE-2026-56126/https://agentprime.io/advisories/CVE-2026-56126/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:19:43 GMTCVECVE-2026-67189: pfSense Plus/CE Stored XSS via Traffic Graphs PTR Recordhttps://agentprime.io/advisories/CVE-2026-67189/https://agentprime.io/advisories/CVE-2026-67189/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 19:18:50 GMTCVECVE-2025-34178: Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-34178/https://agentprime.io/advisories/CVE-2025-34178/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:23:44 GMTCVECVE-2025-34177: Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-34177/https://agentprime.io/advisories/CVE-2025-34177/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:19:09 GMTCVECVE-2025-34176: Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosurehttps://agentprime.io/advisories/CVE-2025-34176/https://agentprime.io/advisories/CVE-2025-34176/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:14:37 GMTCVECVE-2025-34175: Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-34175/https://agentprime.io/advisories/CVE-2025-34175/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:09:50 GMTCVECVE-2025-34174: Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-34174/https://agentprime.io/advisories/CVE-2025-34174/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:02:05 GMTCVECVE-2025-34173: Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosurehttps://agentprime.io/advisories/CVE-2025-34173/https://agentprime.io/advisories/CVE-2025-34173/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 19:59:14 GMTCVECVE-2025-34172: Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-34172/https://agentprime.io/advisories/CVE-2025-34172/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 19:43:30 GMTCVE