DeutschShown in its original language — a full translation is planned for a future version.
Netgate pfSense: Mehrere Schwachstellen
view advisory published 2026-10-15
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Netgate pfSense ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und um auf Dateien zuzugreifen.
01
describes (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-111233US | medium6.1 | — | ||
Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote attackers to inject script via the unencoded… | ||||
| CVE-2026-111232US | medium4.8 | — | ||
Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to… | ||||
| CVE-2026-111231US | high7.2OT elevated | — | ||
Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install… | ||||
| CVE-2026-111230US | medium4.9 | — | ||
Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom… | ||||
| CVE-2026-111229US | high7.2 | — | ||
pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execut… | ||||
| CVE-2026-111228US | medium5.5 | — | ||
Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced pri… | ||||
| CVE-2026-111227US | medium5.5 | — | ||
Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege… | ||||
| CVE-2026-111226US | high7.2 | — | ||
pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as roo… | ||||
| CVE-2026-111225US | high8.8 | — | ||
Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the u… | ||||
| CVE-2026-111224US | high7.5 | — | ||
pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as ro… | ||||
| CVE-2026-111223US | high7.2 | — | ||
Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via… | ||||
| CVE-2026-111222US | high7.2 | — | ||
Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unva… | ||||
| CVE-2026-111221US | high7.2 | — | ||
Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS s… | ||||
| CVE-2026-111220US | high7.2 | — | ||
pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines in… | ||||
| CVE-2026-111219US | high7.2 | — | ||
Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated use… | ||||
| CVE-2026-111218US | high7.2 | — | ||
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root comman… | ||||
| CVE-2026-111217US | high7.2 | — | ||
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as root by stori… | ||||
| CVE-2026-111216US | high7.2 | — | ||
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injectin… | ||||
| CVE-2026-111215US | high7.2 | — | ||
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent i… | ||||
| CVE-2026-111214US | high7.2 | — | ||
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalid… | ||||
02
references
External citations — patches, advisories, analysis.
- Abraxas Labs "pfSense CE leftovers" vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
- GitHub Advisory Database vom 2026-10-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan