anonhaven

CVE-2026-78849

NONE
Updated Sep 04, 2026
PHP
Parameter Value
Vendor PHP
Public PoC No

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions <= 26.03 pfSense CE software versions <= 2.8.1 allows a remote attacker to execute arbitrary code via the captive_portal_status.widget.php file

References 2

https://docs.netgate.com/downloads/pfSense-SA-26_05.webgui.asc
cve@mitre.org
https://redmine.pfsense.org/issues/16773
cve@mitre.org
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-85643

PHP

2.0

CVE-2026-71626

PHP

None

CVE-2026-71625

PHP

None

CVE-2026-71624

PHP

None

CVE-2026-61686

PHP

7.5