Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Netgate — Vulnerabilities & Security Advisories 42

Browse all 42 CVE security advisories affecting Netgate. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Netgate develops network security solutions, primarily focusing on firewall and VPN technologies using pfSense and OPNsense platforms. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and authentication issues. The company has addressed security concerns through regular patches, though some incidents have exposed weaknesses in default configurations and administrative interfaces. Netgate's products remain widely deployed in enterprise environments, requiring careful hardening to mitigate risks associated with their 16 documented CVEs. Security researchers have noted that while vulnerabilities exist, prompt vendor response typically limits exploitation potential in properly maintained deployments.

Found 27 results / 42 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-111233 Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php — pfSense CE CWE-79 4.7 Medium 2026-10-15
CVE-2026-111232 Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color — pfSense CE CWE-79 4.8 Medium 2026-10-15
CVE-2026-111231 Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install() — pfSense CE CWE-863 7.2 High 2026-10-15
CVE-2026-111230 Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL — pfSense CE CWE-73 4.9 Medium 2026-10-15
CVE-2026-111229 Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2026-111228 Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php — pfSense CE CWE-93 5.5 Medium 2026-10-15
CVE-2026-111227 Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php — pfSense CE CWE-93 5.5 Medium 2026-10-15
CVE-2026-111226 Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2026-111225 Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh — pfSense CE CWE-78 5.0 Medium 2026-10-15
CVE-2026-111224 Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh — pfSense CE CWE-78 7.5 High 2026-10-15
CVE-2026-111223 Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner — pfSense CE CWE-74 7.2 High 2026-10-15
CVE-2026-111222 Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting — pfSense CE CWE-93 6.6 Medium 2026-10-15
CVE-2026-111221 Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection — pfSense CE CWE-93 6.6 Medium 2026-10-15
CVE-2026-111219 Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username — pfSense CE CWE-93 6.6 Medium 2026-10-15
CVE-2026-111220 Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid — pfSense CE CWE-93 7.2 High 2026-10-15
CVE-2026-111218 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2026-111216 Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2026-111217 Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2026-111215 Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2026-111214 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php — pfSense CE CWE-78 7.2 High 2026-10-15
CVE-2025-34178 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting — pfSense CE CWE-79 5.4AI Medium AI 2025-09-09
CVE-2025-34177 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting — pfSense CE CWE-79 5.4AI Medium AI 2025-09-09
CVE-2025-34176 Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure — pfSense CE CWE-22 4.3AI Medium AI 2025-09-09
CVE-2025-34175 Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting — pfSense CE CWE-79 6.1AI Medium AI 2025-09-09
CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting — pfSense CE CWE-79 5.4AI Medium AI 2025-09-09
CVE-2025-34173 Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure — pfSense CE CWE-22 4.3AI Medium AI 2025-09-09
CVE-2025-34172 Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting — pfSense CE CWE-79 6.1AI Medium AI 2025-09-09

This page lists every published CVE security advisory associated with Netgate. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.