PT-2026-115193 · Netgate · Pfsense Ce
CVSS v3.1
5.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L |
Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services unbound advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock queue timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pfsense Ce