CVE-2026-111231

HIGH 7.2CVE-2026-111231 · Published 15/10/2026 · updated 26/10/2026

In short

CVE-2026-111231 is a HIGH (CVSS 7.2) vulnerability affecting pfsense (pfsense).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 57.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pfsense pfsense	`≤ 2.9.0`	No fix yet

Description

Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User - Config: Deny Config Write' privilege. Attackers holding page privileges for services_acb.php, uploadconfig.php, diag_confbak.php, or diag_backup.php can install a chosen config.xml to gain root-level code execution after reload or reboot.

References

abraxaslabs.tech/research/pfsense-ce-leftovers · Issue Tracking
abraxas/pfsense-config-readonly-restore · Third Party Advisory
pfsense/pfsense · Product
pfsense/pfsense · Product
vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-authorization-bypass-via-config-restore-and-config-install · Third Party Advisory

More vulnerabilities in pfsense

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pfsense

≤ 2.9.0

No fix yet

Description

More vulnerabilities in pfsense

See all →