pfSense firewall hit with 5 0day RCEs, exploits and writeups published
evilsocket · x · 2026-10-14
Security researcher Abraxas (@abraxasnull) disclosed 5 zero-day RCE vulnerabilities in pfSense firewall, publishing exploits and writeups for each.
One publicized bug (pfSense CE 2.9.0-DEVELOPMENT, CWE-78): the QinQ edit page stores a parent interface name without a doesinterfaceexist check, and FormSelect doesn't re-validate POST data. The stored vlanif is later interpolated into an unescaped ifconfig call executed via PHP exec (/bin/sh -c). Since WebGUI PHP-FPM runs as root, an authenticated user with page-interfaces-qinq-edit privilege gains root RCE. No CVE assigned yet.
More from coding & agent
- kimo v3: Open-Source GUI-less Video Editor Where an Agent Cuts a Full 2-Minute Video via MCP — LieTop7965 · 2026-10-14
- Clayzo launches: a lightweight WebGL animation engine built for coding agents — CurieuxExplorer · 2026-10-14
- 50 practical tips for working with AI: context engineering, voice, and full toolchain control — koltregaskes · 2026-10-14
- Agor Open Beta: Run Multiple Agent Harnesses on Shared Spatial Boards — rohanpaul_ai · 2026-10-14
- A 12-month roadmap to becoming an AI engineer in 2026 without a CS degree — mdancho84 · 2026-10-14
- TV Time's shutdown cost him 15 years of data, so he rebuilt a 10,000-item media tracker in Obsidian — dSebastien · 2026-10-14