Skip to content

CVE record · 1 source

CVE-2026-111222

CVSS 6.6

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject…

Vendor: PHP
Product: PHP, pfSense / OPNsense
CVSS: 6.6
Exposure class: Web platform, Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 16d ago

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject…

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a…

CVSS 6.6 CVE-2026-111222 PHP