CVE-2026-111228

概要

参考情報

• abraxaslabs.tech/research/pfsense-ce-leftovers · Issue Tracking
• abraxas/pfsense-unbound-sock-timeout · Third Party Advisory
• pfsense/pfsense · Product
• pfsense/pfsense · Product
• vulncheck.com/advisories/netgate-pfsense-ce-2.7.1-through-2.9.0-crlf-injection-via-services-unbound-advanced-php · Third Party Advisory

pfsense のその他の脆弱性

• CVE-2026-111233中 6.1Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote atta…
• CVE-2026-111232中 4.8Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: R…
• CVE-2026-111231高 7.2Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml bec…
• CVE-2026-111230中 4.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read fi…
• CVE-2026-111227中 5.5Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with t…