Vendor

    Netgate

    96 known vulnerabilities in products by Netgate, 0 of them actively exploited (CISA KEV).

    Key figures

    96

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Netgate
    HighCVE-2026-111214

    Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php

    also in 1 other product

    		7.2
    HighCVE-2026-111218

    Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters

    also in 1 other product

    		7.2
    HighCVE-2026-111217

    Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID

    also in 1 other product

    		7.2
    HighCVE-2026-110908

    Netgate pfSense-pkg-frr: OS Command Injection

    		8.8
    HighCVE-2026-111226

    Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php

    		7.2
    HighCVE-2026-111229

    Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync

    		7.2
    HighCVE-2026-111215

    Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface

    also in 1 other product

    		7.2
    HighCVE-2026-111216

    Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP

    also in 1 other product

    		7.2
    HighCVE-2026-111224

    Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh

    		7.5
    HighCVE-2025-12490

    Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability

    		8.8
    CriticalCVE-2022-31814

    Netgate Pfblockerng: security vulnerability

    		9.8
    HighCVE-2024-54780

    Netgate pfSense CE: Command Injection

    		8.8
    HighCVE-2023-48123

    Netgate pfSense: Code Execution

    		8.8
    HighCVE-2023-42326

    Netgate pfSense: Code Execution

    		8.8
    HighCVE-2023-27253

    Netgate pfSense: Command Injection

    		8.8
    HighCVE-2026-111225

    Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh

    also in 1 other product

    		5.0
    CriticalCVE-2023-27100

    Netgate pfSense Plus: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2019-16667

    Netgate pfSense: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2017-1000479

    Netgate pfSense: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2019-16701

    Netgate pfSense: Code Injection

    		8.8
    HighCVE-2018-16055

    Netgate pfSense: Command Injection

    		8.8
    MediumCVE-2025-34175

    Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

    also in 1 other product

    		6.1
    CriticalCVE-2019-12585

    Netgate pfSense: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2018-4021

    Netgate pfSense: Command Injection

    		7.2
    HighCVE-2018-4020

    Netgate pfSense: Command Injection

    		7.2

    All vulnerabilities in search

    Products

    Products by Netgate
    Netgate pfSense710
    Pfsense Ce370
    Netgate pfSense Plus160
    Pfsense Ce Software40
    Pfsense Plus Software40
    Netgate Pfsense30