Netgate Pfsense Ce vulnerabilities

• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php CVE-2026-111233 2.3 LowOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color CVE-2026-111232 4.8 MediumOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL CVE-2026-111230 6.9 MediumOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php CVE-2026-111228 5.1 MediumOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php CVE-2026-111227 5.1 MediumOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php CVE-2026-111226 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh CVE-2026-111225 2.3 LowOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh CVE-2026-111224 7.7 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner CVE-2026-111223 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting CVE-2026-111222 7.5 HighOctober 15, 2026
• netgate pfsense ce Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid CVE-2026-111220 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username CVE-2026-111219 7.5 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters CVE-2026-111218 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID CVE-2026-111217 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP CVE-2026-111216 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface CVE-2026-111215 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php CVE-2026-111214 EPSS 10.8% 8.6 HighOctober 15, 2026
• netgate pfsense ce, pfsense plus +1 more In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI)... CVE-2026-97730 8.5 HighSeptember 25, 2026
• netgate pfsense plus, pfsense ce +1 more pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php CVE-2026-56128 5.1 MediumSeptember 3, 2026
• netgate pfsense plus, pfsense ce +1 more pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php CVE-2026-56127 5.1 MediumSeptember 3, 2026
• netgate pfsense plus, pfsense ce +1 more pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php CVE-2026-56126 5.1 MediumSeptember 3, 2026
• netgate pfsense ce, pfsense plus +1 more pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record CVE-2026-67189 5.3 MediumAugust 19, 2026
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting CVE-2025-34178 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting CVE-2025-34177 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure CVE-2025-34176 EPSS 20.5% 5.3 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting CVE-2025-34175 EPSS 24.0% 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting CVE-2025-34174 EPSS 17.3% 5.1 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure CVE-2025-34173 5.3 MediumSeptember 9, 2025
• netgate pfsense ce, pfsense +1 more Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting CVE-2025-34172 4.8 MediumSeptember 9, 2025