PT-2026-115189 · Netgate · Pfsense Ce

Abraxas Labs

·

CVE-2026-111224

·

Publicado

2026-10-15

·

Atualizado

2026-10-15

CVSS v3.1

7.5

Alta

VetorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect async.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes and shell metacharacters to break out of the eval'd pfctl anchor name on connect or disconnect.

Exploit

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-111224

Produtos afetados

Pfsense Ce