Skip to content

CVE record · 1 source

CVE-2026-111220

CVSS 7.2

pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands…

Product: pfSense / OPNsense
CVSS: 7.2
EPSS: 0.007 (p54)
Exposure class: Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 16d ago

pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands…

pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields.…

CVSS 7.2 CVE-2026-111220