CVE-2026-111225

概要

参考情報

• abraxaslabs.tech/research/pfsense-ce-leftovers · Issue Tracking
• abraxas/pfsense-ovpn-learn-cn · Third Party Advisory
• pfsense/pfsense · Product
• vulncheck.com/advisories/netgate-pfsense-ce-2.5.0-through-2.9.0-os-command-injection-via-openvpn-learn-address-sh · Third Party Advisory

pfsense のその他の脆弱性

• CVE-2026-111233中 6.1Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote atta…
• CVE-2026-111232中 4.8Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: R…
• CVE-2026-111231高 7.2Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml bec…
• CVE-2026-111230中 4.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read fi…
• CVE-2026-111228中 5.5Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticat…