EUVD-2026-71610

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

CVE-2026-78849

CVE-2026-78849 is a Cross Site Scripting (XSS) vulnerability in Netgate pfSense Plus versions ≤ 26.03 and pfSense CE versions ≤ 2.8.1 , located in the captive_portal_status.widget.php file. A remote attacker can leverage this to execute arbitrary code . A security advisory (pfSense-SA-26_05.webgu...