https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T15:11:05.202087+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111215 CVE-2026-111215 — Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface 2026-10-17T15:11:05.202801+00:00

Affected: Netgate pfSense CE

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd> via interfaces_wireless_edit.php or interfaces_assign.php, which interface_wireless_clone() interpolates unescaped into an ifconfig shell command.