{"items":[{"id":"CVE-2026-111233","published":"2026-10-15T18:46:32.907Z","updated":"2026-10-15T20:02:04.912Z","title":"Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php","severity":"LOW","score":2.3,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01064,"kevAdded":null},{"id":"CVE-2026-111232","published":"2026-10-15T18:46:32.161Z","updated":"2026-10-21T01:11:30.708Z","title":"Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color","severity":"MEDIUM","score":4.8,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00999,"kevAdded":null},{"id":"CVE-2026-111230","published":"2026-10-15T18:46:30.758Z","updated":"2026-10-15T19:48:31.710Z","title":"Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL","severity":"MEDIUM","score":6.9,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00753,"kevAdded":null},{"id":"CVE-2026-111228","published":"2026-10-15T18:46:29.375Z","updated":"2026-10-15T20:02:39.150Z","title":"Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01841,"kevAdded":null},{"id":"CVE-2026-111227","published":"2026-10-15T18:46:26.531Z","updated":"2026-10-21T01:10:35.133Z","title":"Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01841,"kevAdded":null},{"id":"CVE-2026-111226","published":"2026-10-15T18:46:25.792Z","updated":"2026-10-26T15:07:37.949Z","title":"Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06548,"kevAdded":null},{"id":"CVE-2026-111225","published":"2026-10-15T18:46:25.093Z","updated":"2026-10-15T19:48:58.697Z","title":"Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh","severity":"LOW","score":2.3,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06207,"kevAdded":null},{"id":"CVE-2026-111224","published":"2026-10-15T18:46:24.410Z","updated":"2026-10-16T17:11:27.008Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh","severity":"HIGH","score":7.7,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.05366,"kevAdded":null},{"id":"CVE-2026-111223","published":"2026-10-15T18:46:23.730Z","updated":"2026-10-15T20:04:59.913Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00751,"kevAdded":null},{"id":"CVE-2026-111222","published":"2026-10-15T18:46:23.081Z","updated":"2026-10-21T01:08:42.916Z","title":"Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting","severity":"HIGH","score":7.5,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.0096,"kevAdded":null},{"id":"CVE-2026-111220","published":"2026-10-15T18:46:21.230Z","updated":"2026-10-15T19:49:22.923Z","title":"Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00726,"kevAdded":null},{"id":"CVE-2026-111219","published":"2026-10-15T18:46:20.608Z","updated":"2026-10-16T17:11:33.240Z","title":"Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username","severity":"HIGH","score":7.5,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2026-111218","published":"2026-10-15T18:46:19.971Z","updated":"2026-10-15T20:07:51.202Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.08649,"kevAdded":null},{"id":"CVE-2026-111217","published":"2026-10-15T18:46:19.325Z","updated":"2026-10-21T01:07:02.299Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06959,"kevAdded":null},{"id":"CVE-2026-111216","published":"2026-10-15T18:46:18.645Z","updated":"2026-10-26T15:10:18.183Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.04721,"kevAdded":null},{"id":"CVE-2026-111215","published":"2026-10-15T18:46:17.986Z","updated":"2026-10-15T19:43:31.022Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06248,"kevAdded":null},{"id":"CVE-2026-111214","published":"2026-10-15T18:46:17.293Z","updated":"2026-10-16T17:11:40.178Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.10826,"kevAdded":null},{"id":"CVE-2026-110908","published":"2026-10-15T02:24:04.171Z","updated":"2026-10-15T15:43:35.834Z","title":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An…","severity":"HIGH","score":8.8,"vendor":"Netgate","product":"pfSense-pkg-frr","kev":false,"epss":0.06084,"kevAdded":null},{"id":"CVE-2026-97730","published":"2026-09-25T02:43:13.541Z","updated":"2026-09-26T22:51:19.403Z","title":"In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data…","severity":"HIGH","score":8.5,"vendor":"Netgate","product":"pfSense Plus","kev":false,"epss":0.01025,"kevAdded":null},{"id":"CVE-2026-56128","published":"2026-09-03T14:22:32.197Z","updated":"2026-10-01T19:19:23.911Z","title":"pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense Plus","kev":false,"epss":0.01052,"kevAdded":null},{"id":"CVE-2026-56127","published":"2026-09-03T14:21:35.558Z","updated":"2026-10-01T19:19:23.251Z","title":"pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense Plus","kev":false,"epss":0.01052,"kevAdded":null},{"id":"CVE-2026-56126","published":"2026-09-03T14:19:43.180Z","updated":"2026-10-01T19:19:22.567Z","title":"pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense Plus","kev":false,"epss":0.01052,"kevAdded":null},{"id":"CVE-2026-67189","published":"2026-08-19T19:18:50.158Z","updated":"2026-10-01T15:20:17.101Z","title":"pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record","severity":"MEDIUM","score":5.3,"vendor":"Netgate","product":"pfSense Plus","kev":false,"epss":0.01167,"kevAdded":null},{"id":"CVE-2016-20058","published":"2026-04-04T13:51:01.284Z","updated":"2026-10-27T00:40:45.530Z","title":"Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation","severity":"HIGH","score":8.5,"vendor":"Netgate","product":"NETGATE AMITI Antivirus","kev":false,"epss":0.00731,"kevAdded":null},{"id":"CVE-2016-20057","published":"2026-04-04T13:51:00.540Z","updated":"2026-10-27T00:40:44.817Z","title":"NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation","severity":"HIGH","score":8.5,"vendor":"Netgate","product":"NETGATE Registry Cleaner","kev":false,"epss":0.00617,"kevAdded":null},{"id":"CVE-2019-25271","published":"2026-02-04T23:15:49.196Z","updated":"2026-02-06T20:30:42.499Z","title":"NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path","severity":"HIGH","score":8.5,"vendor":"NETGATE","product":"Data Backup","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2019-25269","published":"2026-02-04T23:15:48.689Z","updated":"2026-10-27T00:54:07.849Z","title":"Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability","severity":"HIGH","score":8.5,"vendor":"Netgate","product":"Amiti Antivirus","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2025-12490","published":"2025-11-06T20:10:57.257Z","updated":"2025-11-06T20:44:02.067Z","title":"Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Netgate","product":"pfSense","kev":false,"epss":0.16951,"kevAdded":null},{"id":"CVE-2025-34178","published":"2025-09-09T20:23:44.475Z","updated":"2026-07-14T22:25:52.398Z","title":"Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.05492,"kevAdded":null},{"id":"CVE-2025-34177","published":"2025-09-09T20:19:09.928Z","updated":"2026-07-14T22:25:51.705Z","title":"Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00954,"kevAdded":null},{"id":"CVE-2025-34176","published":"2025-09-09T20:14:37.899Z","updated":"2026-07-14T22:25:51.016Z","title":"Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.17268,"kevAdded":null},{"id":"CVE-2025-34175","published":"2025-09-09T20:09:50.289Z","updated":"2026-07-14T22:25:50.307Z","title":"Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.21292,"kevAdded":null},{"id":"CVE-2025-34174","published":"2025-09-09T20:02:05.701Z","updated":"2025-11-20T12:23:37.606Z","title":"Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.14478,"kevAdded":null},{"id":"CVE-2025-34173","published":"2025-09-09T19:59:14.136Z","updated":"2026-07-14T22:25:49.597Z","title":"Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00924,"kevAdded":null},{"id":"CVE-2025-34172","published":"2025-09-09T19:43:30.508Z","updated":"2026-07-14T22:25:48.912Z","title":"Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting","severity":"MEDIUM","score":4.8,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01158,"kevAdded":null},{"id":"CVE-2025-53392","published":"2025-06-28T00:00:00.000Z","updated":"2025-06-30T13:32:27.839Z","title":"In Netgate pfSense CE 2.8.0, the \"WebCfg - Diagnostics: Command\" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal.…","severity":"MEDIUM","score":5,"vendor":"Netgate","product":"pfSense","kev":false,"epss":0.01908,"kevAdded":null},{"id":"CVE-2018-4021","published":"2018-12-03T22:00:00.000Z","updated":"2024-09-17T03:22:31.782Z","title":"An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…","severity":"HIGH","score":7.2,"vendor":"Netgate","product":"Netgate pfSense","kev":false,"epss":0.70313,"kevAdded":null},{"id":"CVE-2018-4020","published":"2018-12-03T22:00:00.000Z","updated":"2024-09-16T21:56:37.283Z","title":"An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…","severity":"HIGH","score":7.2,"vendor":"Netgate","product":"Netgate pfSense","kev":false,"epss":0.48721,"kevAdded":null},{"id":"CVE-2018-4019","published":"2018-12-03T22:00:00.000Z","updated":"2024-09-17T04:18:45.952Z","title":"An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…","severity":"HIGH","score":7.2,"vendor":"Netgate","product":"Netgate pfSense","kev":false,"epss":0.48721,"kevAdded":null}]}