CVE-2016-10709
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 34%
from disclosure to weapon0 days
Published on NVDJan 22
metasploitApr 18
exploitation probability
34%top 2% of all CVEs
observed exploitation
nono source reports it
pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php.
Affected products
n/a · n/a