CVE-2026-113779

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

CVE-2026-113779 pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

CVE-2026-113779

The pfSense REST API package (pfSense-pkg-RESTAPI) is vulnerable to a privilege escalation flaw in versions prior to 2.9.0 . Authenticated accounts with the dedicated settings sync permission can modify REST API configuration secrets, allowing a non-administrative user to gain full administrator ...

CVE-2026-113779

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

CVE-2026-113779 pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

EUVD-2026-107283

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

CVE-2026-113779 pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

PT-2026-120624

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST...

CVE-2026-35649 OpenClaw < 2026.3.22 - Settings Reconciliation Bypass via Empty Allowlist

OpenClaw before 2026.3.22 contains a settings reconciliation vulnerability that allows attackers to bypass intended deny-all revocations by exploiting empty allowlist handling. The vulnerability treats explicit empty allowlists as unset during reconciliation, silently undoing intended access...

January 25, 2022—KB5009596 (OS Builds 19042.1503, 19043.1503, and 19044.1503) Preview

January 25, 2022—KB5009596 OS Builds 19042.1503, 19043.1503, and 19044.1503 Preview Applies To Windows 10, version 20H2, all editions Windows Server, version 20H2, all editions Windows 10, version 21H1, all editions Windows 10, version 21H2, all editions Note 01/11/22 REMINDER Windows 10, version...

Keyboard and Language (IME) Does Not Sync from Local to VDA

When the user configures Receiver for Windows Advanced Preferences Keyboard and Language Bar Set "Keyboard" to Yes; Manual switch from "Chinese" to "English" or user "Ctrl + Shift" to switch input Keyboard and Language does not sync from local to VDA...