Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #12

Medium-severity vulnerability disclosed in pfSense firewall software

Original: 🚨 EUVD-2026-70498 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: pfSense CE, pfSense Plus 🏢 Vendor: Netgate 📅 Published: 2026-09

A vulnerability tracked as EUVD-2026-70498 affects Netgate's pfSense Plus before 26.07 and pfSense CE before 2.9.0, carrying a CVSS v3.1 score of 5.1 out of 10. It allows authenticated users holding the Firewall: Schedules: Edit privilege to inject malicious content. Netgate published the advisory on 3 September 2026 and updated it on 1 October, and administrators of pfSense firewalls are being urged to update their installations.

Why now: pfSense is widely used for firewalls, so administrators are checking whether their versions are affected and patching.

NetgatepfSense CEpfSense PlusEUVD-2026-70498

Open on mastodon →

Evidence

• 🚨 EUVD-2026-70498 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: pfSense CE, pfSense Plus 🏢 Vendor: Netgate 📅 Published: 2026-09-03 | Updated: 2026-10-01 📝 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/649579