Skip to content
OpenAdvisories

Product · pfrest

pfSense-pkg-RESTAPI

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-113779

    pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission

    The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated s…

    pfrest pfSense-pkg-RESTAPI