Netgate vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-111231 Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore(High 8.6 · Oct 15, 2026
• CVE-2026-111229 pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HAHigh 8.6 · Oct 15, 2026
• CVE-2026-111226 pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to exeHigh 8.6 · Oct 15, 2026
• CVE-2026-111224 pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to exHigh 7.7 · Oct 15, 2026
• CVE-2026-111223 Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute High 8.6 · Oct 15, 2026
• CVE-2026-111222 Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives bHigh 7.5 · Oct 15, 2026
• CVE-2026-111221 Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting aHigh 7.5 · Oct 15, 2026
• CVE-2026-111220 pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by iHigh 8.6 · Oct 15, 2026
• CVE-2026-111219 Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entriesHigh 7.5 · Oct 15, 2026
• CVE-2026-111218 Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges toHigh 8.6 · Oct 15, 2026
• CVE-2026-111217 Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commaHigh 8.6 · Oct 15, 2026
• CVE-2026-111216 Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commandsHigh 8.6 · Oct 15, 2026
• CVE-2026-111215 Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a craftHigh 8.6 · Oct 15, 2026
• CVE-2026-111214 Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands bHigh 8.6 · Oct 15, 2026
• CVE-2026-110908 Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter.High 8.8 · Oct 14, 2026
• CVE-2026-97730 In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data hHigh 8.5 · Sep 24, 2026
• CVE-2016-20058 Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attHigh 8.5 · Apr 4, 2026
• CVE-2016-20057 NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate priviHigh 8.5 · Apr 4, 2026
• CVE-2019-25271 NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration.High 8.5 · Feb 4, 2026
• CVE-2019-25269 Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations.High 8.5 · Feb 4, 2026
• CVE-2025-12490 Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability.High 8.8 · Nov 6, 2025
• CVE-2024-54780 Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitizHigh 8.8 · May 14, 2025
• CVE-2023-48123 An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the pacHigh 8.8 · Dec 6, 2023
• CVE-2023-42326 An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_eHigh 8.8 · Nov 14, 2023
• CVE-2020-21487 Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field oCritical 9.6 · Apr 4, 2023