CVE-2026-111215

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0; via interfaces wireless edit.php or interfaces assign.php, which interface wireless clone() interpolates unescaped into an ifconfig shell command.