pfSense
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 53 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 3, 2012 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission
Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php
Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color
Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()
Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL
Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php
Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh
Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner
Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting
Monitor pfSense in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.