Vulnerabilidades en Netgate
42 resultadosCVE-2026-111228MEDIUMNetgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.phpEPSS 1.8%CVE-2026-67189MEDIUMpfSense Plus/CE Stored XSS via Traffic Graphs PTR RecordEPSS 1.2%CVE-2025-34172MEDIUMNetgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site ScriptingEPSS 1.2%CVE-2026-111233LOWNetgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.phpEPSS 1.1%CVE-2026-56128MEDIUMpfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.phpEPSS 1.1%CVE-2026-56127MEDIUMpfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.phpEPSS 1.1%CVE-2026-56126MEDIUMpfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.phpEPSS 1.1%CVE-2026-97730HIGHIn Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) wiEPSS 1.0%CVE-2026-111232MEDIUMNetgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator ColorEPSS 1.0%CVE-2026-111222HIGHNetgate pfSense CE through 2.9.0 php.ini Injection via Timezone SettingEPSS 1.0%CVE-2025-34177MEDIUMNetgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site ScriptingEPSS 1.0%CVE-2026-111221HIGHNetgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf InjectionEPSS 0.9%CVE-2025-34173MEDIUMNetgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information DisclosureEPSS 0.9%CVE-2026-111219HIGHNetgate pfSense CE through 2.9.0 Command Injection via PPPoE Server UsernameEPSS 0.9%CVE-2026-111231HIGHNetgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()EPSS 0.8%CVE-2026-111230MEDIUMNetgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLEPSS 0.8%CVE-2026-111223HIGHNetgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login BannerEPSS 0.8%CVE-2016-20058HIGHNetgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege EscalationEPSS 0.7%CVE-2026-111220HIGHNetgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpidEPSS 0.7%CVE-2016-20057HIGHNETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege EscalationEPSS 0.6%