Search vulnerabilities

Results 2

Export CSV
CVE-2026-78902

Cross Site Scripting in pfSense pfBlockerNG Allows Remote Code Execution

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-31814

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

CVSS 3.1 · 9.8 Critical EPSS 91.9% KEV · Not listed
Vendors
Products