VYPR

pfsense-dyndns-file

by Abraxas

CVEs (1)

  • CVE-2026-111230MedOct 15, 2026
    risk 0.32cvss 4.9epss 0.01

    Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so…