CVE-2025-34172

概要

参考情報

• pfsense/FreeBSD-ports commit 04d1328 · Patch
• redmine.pfsense.org/issues/16411 · Issue Tracking
• vulncheck.com/advisories/netgate-pf-sense-ce-ha-proxy-reflected-xss · Third Party Advisory

pfsense のその他の脆弱性

• CVE-2026-111233中 6.1Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote atta…
• CVE-2026-111232中 4.8Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: R…
• CVE-2026-111231高 7.2Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml bec…
• CVE-2026-111230中 4.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read fi…
• CVE-2026-111228中 5.5Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticat…