Product by Netgate
Netgate pfSense
80 known vulnerabilities in Netgate pfSense (Netgate), 0 of them actively exploited (CISA KEV).
Key figures
80
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-111214 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php | 7.2 | |
| High | CVE-2026-111218 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters | 7.2 | |
| High | CVE-2026-111217 | Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID | 7.2 | |
| High | CVE-2026-111226 | Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php | 7.2 | |
| High | CVE-2026-111229 | Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync | 7.2 | |
| High | CVE-2026-111215 | Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface | 7.2 | |
| High | CVE-2026-111216 | Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP | 7.2 | |
| High | CVE-2026-111224 | Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh | 7.5 | |
| High | CVE-2025-12490 | Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-48123 | Netgate pfSense: Code Execution | 8.8 | |
| High | CVE-2023-42326 | Netgate pfSense: Code Execution | 8.8 | |
| High | CVE-2023-27253 | Netgate pfSense: Command Injection | 8.8 | |
| High | CVE-2026-111225 | Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh | 5.0 | |
| Critical | CVE-2023-27100 | Netgate pfSense Plus: security vulnerability | 9.8 | |
| High | CVE-2019-16667 | Netgate pfSense: Cross-Site Request Forgery (CSRF) | 8.8 | |
| High | CVE-2017-1000479 | Netgate pfSense: Cross-Site Request Forgery (CSRF) | 8.8 | |
| High | CVE-2019-16701 | Netgate pfSense: Code Injection | 8.8 | |
| High | CVE-2018-16055 | Netgate pfSense: Command Injection | 8.8 | |
| Medium | CVE-2025-34175 | Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting | 6.1 | |
| Critical | CVE-2019-12585 | Netgate pfSense: security vulnerability | 9.8 | |
| High | CVE-2018-4021 | Netgate pfSense: Command Injection | 7.2 | |
| High | CVE-2018-4020 | Netgate pfSense: Command Injection | 7.2 | |
| High | CVE-2018-4019 | Netgate pfSense: Command Injection | 7.2 | |
| Critical | CVE-2019-16915 | Netgate pfSense: security vulnerability | 9.8 | |
| Medium | CVE-2025-34176 | Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure | 4.3 |