# cve.now: Netgate

The newest entries naming Netgate as an affected vendor (up to 200), of 39 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-111233](https://cve.now/CVE-2026-111233.md): Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall\_rules.php (CVSS 2.3)
- [CVE-2026-111232](https://cve.now/CVE-2026-111232.md): Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color (CVSS 4.8)
- [CVE-2026-111230](https://cve.now/CVE-2026-111230.md): Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL (CVSS 6.9)
- [CVE-2026-111228](https://cve.now/CVE-2026-111228.md): Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services\_unbound\_advanced.php (CVSS 5.1)
- [CVE-2026-111227](https://cve.now/CVE-2026-111227.md): Netgate pfSense CE through 2.9.0 CRLF Injection via services\_unbound\_acls.php (CVSS 5.1)
- [CVE-2026-111226](https://cve.now/CVE-2026-111226.md): Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system\_advanced\_admin.php (CVSS 8.6)
- [CVE-2026-111225](https://cve.now/CVE-2026-111225.md): Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh (CVSS 2.3)
- [CVE-2026-111224](https://cve.now/CVE-2026-111224.md): Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect\_async.sh (CVSS 7.7)
- [CVE-2026-111223](https://cve.now/CVE-2026-111223.md): Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner (CVSS 8.6)
- [CVE-2026-111222](https://cve.now/CVE-2026-111222.md): Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting (CVSS 7.5)
- [CVE-2026-111220](https://cve.now/CVE-2026-111220.md): Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid (CVSS 8.6)
- [CVE-2026-111219](https://cve.now/CVE-2026-111219.md): Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username (CVSS 7.5)
- [CVE-2026-111218](https://cve.now/CVE-2026-111218.md): Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters (CVSS 8.6)
- [CVE-2026-111217](https://cve.now/CVE-2026-111217.md): Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID (CVSS 8.6)
- [CVE-2026-111216](https://cve.now/CVE-2026-111216.md): Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP (CVSS 8.6)
- [CVE-2026-111215](https://cve.now/CVE-2026-111215.md): Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface (CVSS 8.6)
- [CVE-2026-111214](https://cve.now/CVE-2026-111214.md): Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces\_qinq\_edit.php (CVSS 8.6)
- [CVE-2026-110908](https://cve.now/CVE-2026-110908.md): Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2\_1 and source revision 2.1.2\_1 contain an OS command injection vulnerability in the FRR s (CVSS 8.8)
- [CVE-2026-97730](https://cve.now/CVE-2026-97730.md): In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) wi (CVSS 8.5)
- [CVE-2026-56128](https://cve.now/CVE-2026-56128.md): pfSense Plus \< 26.07 / CE \< 2.9.0 Stored XSS via firewall\_schedule\_edit.php (CVSS 5.1)
- [CVE-2026-56127](https://cve.now/CVE-2026-56127.md): pfSense Plus \< 26.07 / CE \< 2.9.0 Stored XSS via firewall\_rules\_edit.php (CVSS 5.1)
- [CVE-2026-56126](https://cve.now/CVE-2026-56126.md): pfSense Plus \< 26.07 / CE \< 2.9.0 Stored XSS via status\_monitoring.php (CVSS 5.1)
- [CVE-2026-67189](https://cve.now/CVE-2026-67189.md): pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record (CVSS 5.3)
- [CVE-2016-20058](https://cve.now/CVE-2016-20058.md): Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation (CVSS 8.5)
- [CVE-2016-20057](https://cve.now/CVE-2016-20057.md): NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation (CVSS 8.5)
- [CVE-2019-25271](https://cve.now/CVE-2019-25271.md): NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path (CVSS 8.5)
- [CVE-2019-25269](https://cve.now/CVE-2019-25269.md): Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability (CVSS 8.5)
- [CVE-2025-12490](https://cve.now/CVE-2025-12490.md): Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2025-34178](https://cve.now/CVE-2025-34178.md): Netgate pfSense CE Suricata package v7.0.8\_2 Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2025-34177](https://cve.now/CVE-2025-34177.md): Netgate pfSense CE Suricata package v7.0.8\_2 Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2025-34176](https://cve.now/CVE-2025-34176.md): Netgate pfSense CE Suricata Package v7.0.8\_2 Directory Traversal Information Disclosure (CVSS 5.3)
- [CVE-2025-34175](https://cve.now/CVE-2025-34175.md): Netgate pfSense CE Suricata package v7.0.8\_2 Reflected Cross-Site Scripting (CVSS 5.1)
- [CVE-2025-34174](https://cve.now/CVE-2025-34174.md): Netgate pfSense CE Status\_Traffic\_Totals Package v2.3.2\_7 Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2025-34173](https://cve.now/CVE-2025-34173.md): Netgate pfSense CE Snort package v4.1.6\_25 Directory Traversal Information Disclosure (CVSS 5.3)
- [CVE-2025-34172](https://cve.now/CVE-2025-34172.md): Netgate pfSense CE HAProxy Package 0.63\_10 Reflected Cross-Site Scripting (CVSS 4.8)
- [CVE-2025-53392](https://cve.now/CVE-2025-53392.md): In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag\_command.php dlPath direct (CVSS 5.0)
- [CVE-2018-4021](https://cve.now/CVE-2018-4021.md): An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS (CVSS 7.2)
- [CVE-2018-4020](https://cve.now/CVE-2018-4020.md): An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS (CVSS 7.2)
- [CVE-2018-4019](https://cve.now/CVE-2018-4019.md): An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS (CVSS 7.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/netgate
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.