Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Netgate Component: Pfsense Ce Clear all filters
TI-2024-37854 CVE-2024-57273 · GHSA-v5vr-7qc6-xw56

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is…

Priority LOW 27

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitra…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01278 Published 2025-05-14 No fix listed CWE-79
TI-2024-36666 CVE-2024-54780 · GHSA-fx6v-jrpq-f762

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are…

Priority MEDIUM 54

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management inter…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12734 Published 2025-05-14 No fix listed CWE-94
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354