Skip to content
Netgate Pfsense vulnerabilities
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php
CVE-2026-111233
2.3 Low
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color
CVE-2026-111232
4.8 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL
CVE-2026-111230
6.9 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
CVE-2026-111228
5.1 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php
CVE-2026-111227
5.1 Medium
-
netgate pfsense ce
Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php
CVE-2026-111226
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh
CVE-2026-111225
2.3 Low
-
netgate pfsense ce
Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh
CVE-2026-111224
7.7 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner
CVE-2026-111223
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting
CVE-2026-111222
7.5 High
-
netgate pfsense ce
Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
CVE-2026-111220
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username
CVE-2026-111219
7.5 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters
CVE-2026-111218
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID
CVE-2026-111217
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP
CVE-2026-111216
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
CVE-2026-111215
8.6 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php
CVE-2026-111214
EPSS 10.8%
8.6 High
-
netgate pfsense-pkg-frr
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS...
CVE-2026-110908
8.8 High
-
netgate pfsense ce, pfsense plus +1 more
In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI)...
CVE-2026-97730
8.5 High
-
netgate pfsense plus, pfsense ce +1 more
pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php
CVE-2026-56128
5.1 Medium
-
netgate pfsense plus, pfsense ce +1 more
pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php
CVE-2026-56127
5.1 Medium
-
netgate pfsense plus, pfsense ce +1 more
pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php
CVE-2026-56126
5.1 Medium
-
netgate pfsense ce, pfsense plus +1 more
pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record
CVE-2026-67189
5.3 Medium
-
netgate pfsense
Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability
CVE-2025-12490
EPSS 17.0%
8.8 High
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting
CVE-2025-34178
5.1 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting
CVE-2025-34177
5.1 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure
CVE-2025-34176
EPSS 17.3%
5.3 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting
CVE-2025-34175
EPSS 21.3%
5.1 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting
CVE-2025-34174
EPSS 14.5%
5.1 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure
CVE-2025-34173
5.3 Medium
-
netgate pfsense ce, pfsense +1 more
Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting
CVE-2025-34172
4.8 Medium
-
netgate pfsense
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading...
CVE-2025-53392
Public exploitDisputed
5.0 Medium
-
netgate pfsense ce, pfsense plus +1 more
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to...
CVE-2024-57273
5.4 Medium
-
netgate pfsense ce, pfsense plus +1 more
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to...
CVE-2024-54780
EPSS 12.7%
8.8 High
-
netgate pfsense ce, pfsense plus +1 more
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to...
CVE-2024-54779
5.4 Medium
-
netgate pfsense
A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute...
CVE-2024-46538
Public exploit
EPSS 80.3%
4.8 Medium
-
9bis kitty, apache sshd, sshj +68 more +70 more
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
CVE-2023-48795
Public exploitFix available
EPSS 93.5%
5.9 Medium
-
netgate pfsense, pfsense plus +1 more
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote...
CVE-2023-48123
Public exploit
EPSS 67.8%
8.8 High
-
netgate pfsense
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to...
CVE-2023-42327
EPSS 55.4%
5.4 Medium
-
netgate pfsense, pfsense plus +1 more
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a...
CVE-2023-42326
Public exploit
EPSS 64.3%
8.8 High
-
netgate pfsense
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to...
CVE-2023-42325
EPSS 57.9%
5.4 Medium
-
netgate pfsense, pfsense acme package +1 more
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows...
CVE-2020-21487
9.6 Critical
-
netgate pfsense plus, pfsense +1 more
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate...
CVE-2023-27100
Public exploit
9.8 Critical
-
netgate pfsense
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0...
CVE-2023-27253
Public exploit
EPSS 89.5%
8.8 High
-
netgate pfsense
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table...
CVE-2022-29273
EPSS 59.6%
6.1 Medium
-
netgate acme, pfsense +1 more
Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME...
CVE-2020-21219
6.1 Medium
-
netgate pfsense, pfsense plus, pfsense ce and pfsense plus +2 more
Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software...
CVE-2022-26019
8.8 High
-
netgate pfsense, pfsense plus, pfsense ce and pfsense plus +2 more
Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software...
CVE-2022-24299
8.8 High
-
netgate pfsense plus, pfsense, pfsense ce and pfsense plus +2 more
Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2...
CVE-2021-20729
6.1 Medium
-
netgate pfsense
Netgate pfSense 2.4.4 - p2 is affected by: Cross Site Scripting (XSS). The impact is:...
CVE-2020-19201
5.4 Medium
- Show olderLoading…