high
Netgate pfSense: Code execution with administrator privileges possible
CERT-Bund (BSI) reports one vulnerability in Netgate pfSense with severity high. The stated impact is code execution with administrator privileges. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
- Access needed
- yes, an account is needed
What this means for you
An attacker can run their own code with administrator privileges. First check whether the system is reachable from the internet: if it is, the update takes precedence over the regular maintenance window.
All 3 advisories for Netgate pfSense
Original source
Insights
More articles
Weekly situation, week 41: 99 advisories, 17 critical
Between 4 Oct and 11 Oct 2026 our sources recorded 99 advisories: 17 critical, 82 high.
Weekly situation, week 40: 80 advisories, 16 critical
Between 27 Sep and 4 Oct 2026 our sources recorded 80 advisories: 16 critical, 64 high.
Weekly situation, week 39: 83 advisories, 22 critical
Between 20 Sep and 27 Sep 2026 our sources recorded 83 advisories: 22 critical, 61 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.