Netgate vulnerabilities

Products

• Pfsense 51
• Pfsense Ce 32
• Pfsense Plus 10
• Pfsense Plus 5
• Pfsense Ce 4
• Pfsense 3

Newest

• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php CVE-2026-111233 2.3 LowOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color CVE-2026-111232 4.8 MediumOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install() CVE-2026-111231 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL CVE-2026-111230 6.9 MediumOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync CVE-2026-111229 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php CVE-2026-111228 5.1 MediumOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php CVE-2026-111227 5.1 MediumOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php CVE-2026-111226 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh CVE-2026-111225 2.3 LowOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh CVE-2026-111224 7.7 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner CVE-2026-111223 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting CVE-2026-111222 7.5 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection CVE-2026-111221 7.5 HighOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid CVE-2026-111220 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username CVE-2026-111219 7.5 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters CVE-2026-111218 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID CVE-2026-111217 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP CVE-2026-111216 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface CVE-2026-111215 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php CVE-2026-111214 EPSS 10.8% 8.6 HighOctober 15, 2026
• netgate pfsense-pkg-frr Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS... CVE-2026-110908 8.8 HighOctober 15, 2026
• netgate pfsense ce, pfsense plus +1 more In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI)... CVE-2026-97730 8.5 HighSeptember 25, 2026
• netgate pfsense plus, pfsense ce +1 more pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php CVE-2026-56128 5.1 MediumSeptember 3, 2026
• netgate pfsense plus, pfsense ce +1 more pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php CVE-2026-56127 5.1 MediumSeptember 3, 2026
• netgate pfsense plus, pfsense ce +1 more pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php CVE-2026-56126 5.1 MediumSeptember 3, 2026
• netgate pfsense ce, pfsense plus +1 more pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record CVE-2026-67189 5.3 MediumAugust 19, 2026
• netgate amiti antivirus Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation CVE-2016-20058 8.5 HighApril 4, 2026
• netgate registry cleaner NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation CVE-2016-20057 8.5 HighApril 4, 2026
• netgate data backup NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path CVE-2019-25271 8.5 HighFebruary 4, 2026
• netgate amiti antivirus Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability CVE-2019-25269 8.5 HighFebruary 4, 2026
• netgate pfsense Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability CVE-2025-12490 EPSS 17.0% 8.8 HighNovember 6, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting CVE-2025-34178 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting CVE-2025-34177 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure CVE-2025-34176 EPSS 17.3% 5.3 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting CVE-2025-34175 EPSS 21.3% 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting CVE-2025-34174 EPSS 14.5% 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure CVE-2025-34173 5.3 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting CVE-2025-34172 4.8 MediumSeptember 9, 2025
• netgate pfsense In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading... CVE-2025-53392 Public exploitDisputed 5.0 MediumJune 28, 2025
• netgate pfsense ce, pfsense plus +1 more Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to... CVE-2024-57273 5.4 MediumMay 14, 2025
• netgate pfsense ce, pfsense plus +1 more Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to... CVE-2024-54780 EPSS 12.7% 8.8 HighMay 14, 2025
• netgate pfsense ce, pfsense plus +1 more Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to... CVE-2024-54779 5.4 MediumMay 14, 2025
• netgate pfsense A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute... CVE-2024-46538 Public exploit EPSS 80.3% 4.8 MediumOctober 22, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• netgate pfsense, pfsense plus +1 more An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote... CVE-2023-48123 Public exploit EPSS 67.8% 8.8 HighDecember 6, 2023
• netgate pfsense Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to... CVE-2023-42327 EPSS 55.4% 5.4 MediumNovember 14, 2023
• netgate pfsense, pfsense plus +1 more An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a... CVE-2023-42326 Public exploit EPSS 64.3% 8.8 HighNovember 14, 2023
• netgate pfsense Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to... CVE-2023-42325 EPSS 57.9% 5.4 MediumNovember 14, 2023
• netgate pfsense, pfsense acme package +1 more Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows... CVE-2020-21487 9.6 CriticalApril 4, 2023
• netgate pfsense plus, pfsense +1 more Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate... CVE-2023-27100 Public exploit 9.8 CriticalMarch 22, 2023
• Show olderLoading…