https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T15:08:04.619758+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111225 fkie_cve-2026-111225 2026-10-17T15:08:04.635624+00:00

Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolated unquoted into su -c strings, when DNS Resolver client registration is enabled.

 https://db.gcve.eu/vuln/ghsa-643j-4p8v-85c8 GHSA-643j-4p8v-85c8 2026-10-17T15:08:04.635690+00:00

Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolated unquoted into su -c strings, when DNS Resolver client registration is enabled.