https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T15:11:00.363522+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111217 CVE-2026-111217 — Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID 2026-10-17T15:11:00.364591+00:00

Affected: Netgate pfSense CE

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as root by storing an unvalidated CARP VHID. Attackers can supply a VHID containing shell metacharacters that executes via interface_ipalias_configure() ifconfig calls or get_carp_interface_status() when CARP status is rendered.