CVE-2026-111233Medium 4.7Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php1.1%
CVE-2026-111232Medium 4.8Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color1.0%
CVE-2026-111231High 7.2Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()0.8%
CVE-2026-111230Medium 4.9Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL0.8%
CVE-2026-111229High 7.2Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync6.4%
CVE-2026-111228Medium 5.5Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php1.8%
CVE-2026-111227Medium 5.5Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php1.8%
CVE-2026-111226High 7.2Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php6.5%
CVE-2026-111225Medium 5.0Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh6.2%
CVE-2026-111224High 7.5Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh5.4%
CVE-2026-111223High 7.2Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner0.8%
CVE-2026-111222Medium 6.6Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting1.0%
CVE-2026-111221Medium 6.6Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection0.9%
CVE-2026-111220High 7.2Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid0.7%
CVE-2026-111219Medium 6.6Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username0.9%
CVE-2026-111218High 7.2Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters8.6%
CVE-2026-111217High 7.2Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID7.0%
CVE-2026-111216High 7.2Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP4.7%
CVE-2026-111215High 7.2Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface6.2%
CVE-2026-111214High 7.2Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php10.8%
CVE-2026-97730High 8.5In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an authenticated attacker1.0%
CVE-2026-56128Medium 5.4pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php1.1%
CVE-2026-56127Medium 5.4pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php1.1%
CVE-2026-56126Medium 5.4pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php1.1%
CVE-2026-67189Medium 6.1pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record1.2%
CVE-2025-34178Medium 5.1Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting5.5%
CVE-2025-34177Medium 5.1Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting1.0%
CVE-2025-34176Medium 5.3Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure17.3%
CVE-2025-34175Medium 5.1Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting21.3%
CVE-2025-34174Medium 5.1Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting14.5%
CVE-2025-34173Medium 5.3Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure0.9%
CVE-2025-34172Medium 4.8Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting1.2%