Product by Netgate
Netgate pfSense Plus
16 known vulnerabilities in Netgate pfSense Plus (Netgate), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-110908 | Netgate pfSense-pkg-frr: OS Command Injection | 8.8 | |
| High | CVE-2024-54780 | Netgate pfSense CE: Command Injection | 8.8 | |
| High | CVE-2023-48123 | Netgate pfSense: Code Execution | 8.8 | |
| High | CVE-2023-42326 | Netgate pfSense: Code Execution | 8.8 | |
| Critical | CVE-2023-27100 | Netgate pfSense Plus: security vulnerability | 9.8 | |
| Medium | CVE-2023-48795 | SSH Communications Security SSH daemon: security vulnerability | 5.9 | |
| High | CVE-2022-26019 | pfSense CE and pfSense Plus: Improper Access Control | 8.8 | |
| Medium | CVE-2024-54779 | Netgate pfSense CE: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2026-97730 | Netgate pfSense Plus: Path Traversal: '../filedir' | 8.5 | |
| High | CVE-2022-24299 | pfSense CE and pfSense Plus: Improper Input Validation | 8.8 | |
| Medium | CVE-2021-20729 | pfSense CE and pfSense Plus: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-67189 | pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record | 6.1 | |
| Medium | CVE-2026-56127 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php | 5.4 | |
| Medium | CVE-2026-56128 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php | 5.4 | |
| Medium | CVE-2026-56126 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php | 5.4 | |
| Medium | CVE-2024-57273 | Netgate pfSense CE: Cross-Site Scripting (XSS) | 5.4 |