Advisories · Technology

Netgate pfSense Plus.

Every CVE that names Netgate pfSense Plus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97730 CVE record

CVSS 8.5 High

Path traversal in Netgate pfSense Plus and others
- Netgate pfSense Plus
- Netgate pfSense CE
- Path traversal
Not analysed yet 25 Sept 2026
CVE-2026-56128 CVE record

CVSS 5.1 Medium

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-56127 CVE record

CVSS 5.1 Medium

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-56126 CVE record

CVSS 5.1 Medium

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-67189 CVE record

CVSS 5.3 Medium

pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
Not analysed yet 19 Aug 2026