CVE-2024-54780

creationtimestamp| type| source ---|---|--- 2025-05-14 16:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5gqajmlh2h 2025-05-20 14:40:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16982...

CVE-2024-54780

Netgate pfSense CE prior to 2.8.0 beta release and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management interface. An authenticated attacker can exploit this vulnerability by injecting...

CVE-2024-54780

CVE-2024-54780 affects Netgate pfSense CE (prior to 2.8.0 beta) and corresponding Plus builds. The vulnerability is a command-injection flaw in the OpenVPN widget caused by improper sanitization of user-supplied input to the OpenVPN management interface, enabling an authenticated attacker to inje...