Netgate / Pfsense CE
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-97730 | In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data… | HIGH | 8.5 | Sep 25, 2026 |
| CVE-2026-56128 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php | MEDIUM | 5.1 | Sep 3, 2026 |
| CVE-2026-56127 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php | MEDIUM | 5.1 | Sep 3, 2026 |
| CVE-2026-56126 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php | MEDIUM | 5.1 | Sep 3, 2026 |
| CVE-2026-67189 | pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record | MEDIUM | 5.3 | Aug 19, 2026 |
| CVE-2025-34178 | Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting | MEDIUM | 5.1 | Sep 9, 2025 |
| CVE-2025-34177 | Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting | MEDIUM | 5.1 | Sep 9, 2025 |
| CVE-2025-34176 | Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure | MEDIUM | 5.3 | Sep 9, 2025 |
| CVE-2025-34175 | Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting | MEDIUM | 5.1 | Sep 9, 2025 |
| CVE-2025-34174 | Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting | MEDIUM | 5.1 | Sep 9, 2025 |
| CVE-2025-34173 | Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure | MEDIUM | 5.3 | Sep 9, 2025 |
| CVE-2025-34172 | Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting | MEDIUM | 4.8 | Sep 9, 2025 |
| CVE-2024-57273 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backu… | MEDIUM | 5.4 | May 14, 2025 |
| CVE-2024-54780 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper saniti… | HIGH | 8.8 | May 14, 2025 |
| CVE-2024-54779 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php. | MEDIUM | 5.4 | May 14, 2025 |
| CVE-2023-48795 | ssh: Prefix truncation attack on Binary Packet Protocol (BPP) | MEDIUM | 5.9 | Dec 18, 2023 |
Showing 1 to 12 of 12 CVEs