{"schema_version":1,"title":"Netgate pfSense Plus vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in Netgate pfSense Plus: 1 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-97730, was published on 25 September 2026.","url":"https://junglewise.ai/threats/technologies/pfsense-plus","json_url":"https://junglewise.ai/threats/technologies/pfsense-plus.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/pfsense-plus","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":12,"critical":0,"exploited":0,"last_7_days":1,"last_30_days":6,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-97730","cvss":8.5,"epss":0.0103,"slug":"cve-2026-97730-in-netgate-pfsense-plus-before-26-07-and-pfsense-ce-before-2-9-0","title":"Netgate pfSense local file inclusion in Dashboard widget","severity":"high","exploited":false,"published_at":"2026-09-25T03:16:59.533+00:00","url":"https://junglewise.ai/threats/cve-2026-97730-in-netgate-pfsense-plus-before-26-07-and-pfsense-ce-before-2-9-0"},{"cve":"CVE-2026-78849","cvss":5.4,"epss":0.005,"slug":"cve-2026-78849-netgate-pfsense-stored-cross-site-scripting-in-captive-portal","title":"Netgate pfSense stored cross-site scripting in Captive Portal widget","severity":"medium","exploited":false,"published_at":"2026-09-04T17:16:58.14+00:00","url":"https://junglewise.ai/threats/cve-2026-78849-netgate-pfsense-stored-cross-site-scripting-in-captive-portal"},{"cve":"CVE-2026-38961","cvss":5.4,"epss":0.0028,"slug":"cve-2026-38961-netgate-pfsense-rss-widget-stored-xss-in-feed-titles","title":"Netgate pfSense RSS widget stored XSS in feed titles","severity":"medium","exploited":false,"published_at":"2026-09-04T17:16:57.03+00:00","url":"https://junglewise.ai/threats/cve-2026-38961-netgate-pfsense-rss-widget-stored-xss-in-feed-titles"},{"cve":"CVE-2026-56128","cvss":5.4,"epss":0.0105,"slug":"cve-2026-56128-netgate-pfsense-stored-xss-in-firewall-rule-schedules","title":"Netgate pfSense stored XSS in firewall rule schedules","severity":"medium","exploited":false,"published_at":"2026-09-03T15:17:30.953+00:00","url":"https://junglewise.ai/threats/cve-2026-56128-netgate-pfsense-stored-xss-in-firewall-rule-schedules"},{"cve":"CVE-2026-56127","cvss":5.4,"epss":0.0105,"slug":"cve-2026-56127-netgate-pfsense-stored-xss-in-firewall-log-descriptions","title":"Netgate pfSense stored XSS in firewall log descriptions","severity":"medium","exploited":false,"published_at":"2026-09-03T15:17:30.793+00:00","url":"https://junglewise.ai/threats/cve-2026-56127-netgate-pfsense-stored-xss-in-firewall-log-descriptions"},{"cve":"CVE-2026-56126","cvss":5.4,"epss":0.0105,"slug":"cve-2026-56126-netgate-pfsense-stored-xss-in-status-monitoring","title":"Netgate pfSense stored XSS in Status Monitoring","severity":"medium","exploited":false,"published_at":"2026-09-03T15:17:30.63+00:00","url":"https://junglewise.ai/threats/cve-2026-56126-netgate-pfsense-stored-xss-in-status-monitoring"},{"cve":"CVE-2025-34178","cvss":5.4,"epss":0.034,"slug":"cve-2025-34178-netgate-pfsense-suricata-stored-xss-in-suricata-app-parsers-php","title":"Netgate pfSense Suricata stored XSS in suricata_app_parsers.php","severity":"medium","exploited":false,"published_at":"2025-09-09T21:15:35.67+00:00","url":"https://junglewise.ai/threats/cve-2025-34178-netgate-pfsense-suricata-stored-xss-in-suricata-app-parsers-php"},{"cve":"CVE-2025-34177","cvss":5.4,"epss":0.0079,"slug":"cve-2025-34177-netgate-pfsense-suricata-stored-xss-in-suricata-flow-stream-php","title":"Netgate pfSense Suricata stored XSS in suricata_flow_stream.php","severity":"medium","exploited":false,"published_at":"2025-09-09T21:15:35.503+00:00","url":"https://junglewise.ai/threats/cve-2025-34177-netgate-pfsense-suricata-stored-xss-in-suricata-flow-stream-php"},{"cve":"CVE-2025-34176","cvss":4.3,"epss":0.139,"slug":"cve-2025-34176-netgate-pfsense-suricata-directory-traversal-in-suricata-ip","title":"Netgate pfSense Suricata directory traversal in suricata_ip_reputation.php","severity":"medium","exploited":false,"published_at":"2025-09-09T21:15:35.333+00:00","url":"https://junglewise.ai/threats/cve-2025-34176-netgate-pfsense-suricata-directory-traversal-in-suricata-ip"},{"cve":"CVE-2025-34175","cvss":6.1,"epss":0.1478,"slug":"cve-2025-34175-netgate-pfsense-suricata-reflected-xss-in-suricata-filecheck-php","title":"Netgate pfSense Suricata reflected XSS in suricata_filecheck.php","severity":"medium","exploited":false,"published_at":"2025-09-09T20:15:38.903+00:00","url":"https://junglewise.ai/threats/cve-2025-34175-netgate-pfsense-suricata-reflected-xss-in-suricata-filecheck-php"},{"cve":"CVE-2025-34173","cvss":4.3,"epss":0.0084,"slug":"cve-2025-34173-netgate-pfsense-snort-package-directory-traversal-in-snort-ip","title":"Netgate pfSense Snort package directory traversal in snort_ip_reputation.php","severity":"medium","exploited":false,"published_at":"2025-09-09T20:15:38.56+00:00","url":"https://junglewise.ai/threats/cve-2025-34173-netgate-pfsense-snort-package-directory-traversal-in-snort-ip"},{"cve":"CVE-2025-34172","cvss":6.1,"epss":0.0096,"slug":"cve-2025-34172-netgate-pfsense-haproxy-reflected-xss-in-haproxy-stats-php","title":"Netgate pfSense HAProxy reflected XSS in haproxy_stats.php","severity":"medium","exploited":false,"published_at":"2025-09-09T20:15:37.87+00:00","url":"https://junglewise.ai/threats/cve-2025-34172-netgate-pfsense-haproxy-reflected-xss-in-haproxy-stats-php"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1}],"related":[{"name":"Netgate pfSense CE","slug":"pfsense-ce","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/pfsense-ce"},{"name":"Netgate Suricata package for pfSense","slug":"suricata-package-for-pfsense","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/suricata-package-for-pfsense"}],"technology":{"hub":true,"name":"Netgate pfSense Plus","slug":"pfsense-plus","vendor":{"name":"Netgate","slug":"netgate","url":"https://junglewise.ai/threats/vendors/netgate"},"aliases":[],"category":"operating-system","homepage":"https://www.netgate.com/pfsense-plus","description":"A commercial operating system based on FreeBSD designed for firewall, VPN, and routing applications.","url":"https://junglewise.ai/threats/technologies/pfsense-plus"},"most_severe":[{"cve":"CVE-2026-97730","cvss":8.5,"epss":0.0103,"slug":"cve-2026-97730-in-netgate-pfsense-plus-before-26-07-and-pfsense-ce-before-2-9-0","title":"Netgate pfSense local file inclusion in Dashboard widget","severity":"high","exploited":false,"published_at":"2026-09-25T03:16:59.533+00:00","url":"https://junglewise.ai/threats/cve-2026-97730-in-netgate-pfsense-plus-before-26-07-and-pfsense-ce-before-2-9-0"},{"cve":"CVE-2025-34175","cvss":6.1,"epss":0.1478,"slug":"cve-2025-34175-netgate-pfsense-suricata-reflected-xss-in-suricata-filecheck-php","title":"Netgate pfSense Suricata reflected XSS in suricata_filecheck.php","severity":"medium","exploited":false,"published_at":"2025-09-09T20:15:38.903+00:00","url":"https://junglewise.ai/threats/cve-2025-34175-netgate-pfsense-suricata-reflected-xss-in-suricata-filecheck-php"},{"cve":"CVE-2025-34172","cvss":6.1,"epss":0.0096,"slug":"cve-2025-34172-netgate-pfsense-haproxy-reflected-xss-in-haproxy-stats-php","title":"Netgate pfSense HAProxy reflected XSS in haproxy_stats.php","severity":"medium","exploited":false,"published_at":"2025-09-09T20:15:37.87+00:00","url":"https://junglewise.ai/threats/cve-2025-34172-netgate-pfsense-haproxy-reflected-xss-in-haproxy-stats-php"},{"cve":"CVE-2025-34178","cvss":5.4,"epss":0.034,"slug":"cve-2025-34178-netgate-pfsense-suricata-stored-xss-in-suricata-app-parsers-php","title":"Netgate pfSense Suricata stored XSS in suricata_app_parsers.php","severity":"medium","exploited":false,"published_at":"2025-09-09T21:15:35.67+00:00","url":"https://junglewise.ai/threats/cve-2025-34178-netgate-pfsense-suricata-stored-xss-in-suricata-app-parsers-php"},{"cve":"CVE-2026-56128","cvss":5.4,"epss":0.0105,"slug":"cve-2026-56128-netgate-pfsense-stored-xss-in-firewall-rule-schedules","title":"Netgate pfSense stored XSS in firewall rule schedules","severity":"medium","exploited":false,"published_at":"2026-09-03T15:17:30.953+00:00","url":"https://junglewise.ai/threats/cve-2026-56128-netgate-pfsense-stored-xss-in-firewall-rule-schedules"},{"cve":"CVE-2026-56127","cvss":5.4,"epss":0.0105,"slug":"cve-2026-56127-netgate-pfsense-stored-xss-in-firewall-log-descriptions","title":"Netgate pfSense stored XSS in firewall log descriptions","severity":"medium","exploited":false,"published_at":"2026-09-03T15:17:30.793+00:00","url":"https://junglewise.ai/threats/cve-2026-56127-netgate-pfsense-stored-xss-in-firewall-log-descriptions"},{"cve":"CVE-2026-56126","cvss":5.4,"epss":0.0105,"slug":"cve-2026-56126-netgate-pfsense-stored-xss-in-status-monitoring","title":"Netgate pfSense stored XSS in Status Monitoring","severity":"medium","exploited":false,"published_at":"2026-09-03T15:17:30.63+00:00","url":"https://junglewise.ai/threats/cve-2026-56126-netgate-pfsense-stored-xss-in-status-monitoring"},{"cve":"CVE-2025-34177","cvss":5.4,"epss":0.0079,"slug":"cve-2025-34177-netgate-pfsense-suricata-stored-xss-in-suricata-flow-stream-php","title":"Netgate pfSense Suricata stored XSS in suricata_flow_stream.php","severity":"medium","exploited":false,"published_at":"2025-09-09T21:15:35.503+00:00","url":"https://junglewise.ai/threats/cve-2025-34177-netgate-pfsense-suricata-stored-xss-in-suricata-flow-stream-php"},{"cve":"CVE-2026-78849","cvss":5.4,"epss":0.005,"slug":"cve-2026-78849-netgate-pfsense-stored-cross-site-scripting-in-captive-portal","title":"Netgate pfSense stored cross-site scripting in Captive Portal widget","severity":"medium","exploited":false,"published_at":"2026-09-04T17:16:58.14+00:00","url":"https://junglewise.ai/threats/cve-2026-78849-netgate-pfsense-stored-cross-site-scripting-in-captive-portal"},{"cve":"CVE-2026-38961","cvss":5.4,"epss":0.0028,"slug":"cve-2026-38961-netgate-pfsense-rss-widget-stored-xss-in-feed-titles","title":"Netgate pfSense RSS widget stored XSS in feed titles","severity":"medium","exploited":false,"published_at":"2026-09-04T17:16:57.03+00:00","url":"https://junglewise.ai/threats/cve-2026-38961-netgate-pfsense-rss-widget-stored-xss-in-feed-titles"}],"generated_at":"2026-09-26T11:07:00.153785+00:00"}