privlabs/CVE-2025-69690-CVE-2025-69691

PoC

Authenticated RCE in Netgate pfSense CE 2.7.2 and 2.8.0

view exploit source poc_in_githubauthor privlabspublished 2026-02-16catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-69690US	—	0.81% (57th)	Exploit	2026-05-08
Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property. NOTE: the…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.