Skip to content

CVE record · 1 source

CVE-2026-111226

CVSS 7.2

pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access…

Product: pfSense / OPNsense
CVSS: 7.2
EPSS: 0.065 (p94)
Exposure class: Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 16d ago

pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access…

pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as root via Login Protection settings. Attackers can…

CVSS 7.2 CVE-2026-111226