VYPR

pfsense-limiter-number

by Abraxas

CVEs (1)

  • CVE-2026-111218HigOct 15, 2026
    risk 0.47cvss 7.2epss 0.09

    Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number'…