Executive brief
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package
Junglewise Threat Intelligence
CVE-2026-78902: Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG packa
CVE-2026-78902 · Severity: medium · CVSS 6.1 · Published 2026-09-25