Login Request a demo
PP
Product
pfSense Plus
by Netgate · last CVE Sep 25, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 1High 6Medium 8Low 0
Severity
All severities15Critical1High6Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pfSense Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-54780
8.8
13%
May 14
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of…
Affected: before 25.03
CVE-2023-48123
8.8
68%
Dec 6
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php…
Affected: through 23.05.1
CVE-2023-42326
8.8
64%
Nov 14
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components
Affected: through 23.05.1
CVE-2022-26019
8.8
4%
Mar 31
Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a…
Affected: before 22.01
CVE-2022-24299
8.8
2%
Mar 31
Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a…
Affected: before 22.01
CVE-2026-97730
8.5
1%
Sep 25
In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an…
Affected: before 26.07
Showing 6