Mmastodon TechnologyCybersecurity first seen 7 h ago, last 7 h ago, peak #10

pfSense vulnerability allows privilege injection, patch released

Original: 🚨 EUVD-2026-70495 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: pfSense Plus, pfSense CE 🏢 Vendor: Netgate 📅 Published: 2026-09

A medium-severity vulnerability, tracked as EUVD-2026-70495 with a CVSS score of 5.1, affects Netgate's pfSense Plus before version 26.07 and pfSense CE before 2.9.0. The flaw lets authenticated users holding the Status: Monitoring privilege inject arbitrary content, potentially leading to further abuse. Netgate published the advisory on 3 September 2026 and updated it on 1 October; administrators are advised to upgrade.

Why now: Network administrators are checking whether their pfSense firewalls are exposed and applying the fixed versions.

NetgatepfSensepfSense CEpfSense Plus

Open on mastodon →

Evidence

• 🚨 EUVD-2026-70495 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: pfSense Plus, pfSense CE 🏢 Vendor: Netgate 📅 Published: 2026-09-03 | Updated: 2026-10-01 📝 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/649577