Skip to content

CVE record · 1 source

CVE-2026-111214

CVSS 7.2

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run…

Product: pfSense / OPNsense
CVSS: 7.2
EPSS: 0.11 (p96)
Exposure class: Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 16d ago

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run…

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a…

CVSS 7.2 EPSS 0.11 CVE-2026-111214