233 matches found
CVE-2025-69690-CVE-2025-69691
🔐 CVE-2025-69690 & CVE-2025-69691 Authenticated Remote Code Execution in Netgate pfSense Community Edition 📋 Summary Field| Details ---|--- Researcher| Nelson Adhepeau @privlabs Vendor| Netgate Product| pfSense Community Edition Versions| 2.7.2 and 2.8.0 Type| Authenticated Remote Code Execution...
pfsense-api-unix-sock-noauth
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-unix-sock-noauth pfsense-api-unix-sock-noauth Class: Privilege leftover Reach: Local pfSense Plus MIM API b4acd7ca - Netgate github.com/Netgate/pfsense-api is the public OpenAPI plus generated Python for...
pfsense-api-acme-key-dump
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-acme-key-dump pfsense-api-acme-key-dump Class: Privilege leftover Reach: Remote pfSense Plus Nexus Multi-instance Management OpenAPI toolkit b4acd7ca - Netgate GET /services/acme GetACMEConfig returns...
pfsense-api-fleet-jwt
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-fleet-jwt pfsense-api-fleet-jwt Class: IDOR Reach: Remote pfSense Plus MIM API Netgate pin b4acd7ca - github.com/Netgate/pfsense-api One POST /login Bearer is reused for every enrolled deviceid. Official...
pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...
pfsense-api-snort-file-join
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-snort-file-join pfsense-api-snort-file-join Class: File read Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/snort/rules/name/file takes two path parameters, both...
Netgate pfSense Code Execution
The vulnerability in the deletequeue function of the Netgate pfSense software firewall is related to improper handling of special elements. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
CVE-2026-111230 Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL
Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in servicesdyndnsedit.php. Attackers can set a non-matching Result Match string so checkStatus logs file...
CVE-2026-111228 Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sockqueuetimeout parameter...
CVE-2026-111223
Netgate pfSense CE 2.7.0 through 2.9.0 is vulnerable to a configuration injection flaw in the IPsec Mobile login banner . Authenticated users with IPsec Mobile privileges can execute commands as root by submitting a single-line banner containing a } character. This allows them to escape the unquo...
EUVD-2026-102333
Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret. Attackers with L2TP or PPPoE Server edit privileges can POST a secret containing a quote and newline to...
PT-2026-125748
Уязвимость функции delete queue программного межсетевого экрана Netgate pfSense связана с непринятием мер по нейтрализации специальных элементов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
CVE-2026-78902
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.
CVE-2026-78902
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
CVE-2026-78849
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2026-78849
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense Plus software (versions <= 26.03) and pfSense CE software (versions
EUVD-2026-71610
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2026-78849
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
Netgate pfsense plus cross-site scripting vulnerability
Versions of Netgate pfsense prior to 26.07 and pfSense CE 2.8.1 and earlier contain a cross-site scripting vulnerability. This vulnerability arises because the reverse DNS lookup returned by the Traffic Graphs top-talkers feature is merged into the AJAX response without sanitization. The resultin...
Netgate pfSense Plus - Login Panel Detection
Netgate pfSense Plus firewall login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netgate pfSense Plus firewall login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netgate pfSense Plu...