Netgate pfSense Plus

• CVE-2026-97730 High 8.5 In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an authenticated attacker 1.0%
• CVE-2026-56128 Medium 5.4 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php 1.1%
• CVE-2026-56127 Medium 5.4 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php 1.1%
• CVE-2026-56126 Medium 5.4 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php 1.1%
• CVE-2026-67189 Medium 6.1 pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record 1.2%