Read the docs

Netgate

Records93All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high35CVSS 7.0–8.9

Exploited now

Netgate records in CISA KEV

No Netgate vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pfsense 49 records HIGH Pfsense Plus 10 records HIGH Pfsense Ce 4 records HIGH Acme 1 record LOW Amiti Antivirus 1 record HIGH Haproxy 1 record MEDIUM Pfblockerng 1 record CRITICAL Pfsense Acme Package 1 record MEDIUM

Records

4 records in Pfsense Ce · all components

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2024-36666 CVE-2024-54780 · GHSA-fx6v-jrpq-f762

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are…

Priority MEDIUM 54

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management inter…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12734 Published 2025-05-14 No fix listed CWE-94
TI-2024-37854 CVE-2024-57273 · GHSA-v5vr-7qc6-xw56

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is…

Priority LOW 27

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitra…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01278 Published 2025-05-14 No fix listed CWE-79
Open these records in search →