Login Request a demo
PP
Product
pfSense Plus
by Netgate · last CVE Sep 25, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 1High 6Medium 8Low 0
Severity
All severities15Critical1High6Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pfSense Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-67189
6.1
1%
Aug 19
pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record
Affected: before 26.07
CVE-2021-20729
6.1
3%
Mar 31
Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a…
Affected: through 21.05
CVE-2023-48795
5.9
94%
Dec 18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…
Affected: through 23.09.1
CVE-2026-56128
5.4
1%
Sep 3
pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php
Affected: before 26.07
CVE-2026-56127
5.4
1%
Sep 3
pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php
Affected: before 26.07
CVE-2026-56126
5.4
1%
Sep 3
pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php
Affected: before 26.07
CVE-2024-57273
5.4
1%
May 14
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service,…
Affected: before 25.03
CVE-2024-54779
5.4
9%
May 14
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php
Affected: before 25.03
Showing 8