Netgate pfSense Plus vulnerabilities

Newest CVEs

• CVE-2026-97730

  In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data…

  Netgate · pfSense Plus

  High8.5
• CVE-2026-56128

  pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php

  Netgate · pfSense Plus

  Medium5.1
• CVE-2026-56127

  pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php

  Netgate · pfSense Plus

  Medium5.1
• CVE-2026-56126

  pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php

  Netgate · pfSense Plus

  Medium5.1
• CVE-2026-67189

  pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

  Netgate · pfSense Plus

  Medium5.3