Known Vulnerabilities for Pfsense Plus by Pfsense
Listed below are 1 of the newest known vulnerabilities associated with "Pfsense Plus" by "Pfsense".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-69691 json | Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this becau... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2025-69690 json | Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object ... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2023-48795 json | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote att... | Not Provided | 2023-12-18 | 2026-05-12 |
| CVE-2022-23993 json | /usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo ca... | 6.1 - MEDIUM | 2022-01-26 | 2022-04-29 |