https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T06:48:24.946443+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111230 fkie_cve-2026-111230 2026-10-17T06:48:24.964358+00:00

Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.

 https://db.gcve.eu/vuln/ghsa-c3v6-7g6h-r7q8 GHSA-c3v6-7g6h-r7q8 2026-10-17T06:48:24.964426+00:00

Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.