https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:34:54.403019+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1022 certfr-2026-avi-1022 — De multiples vulnérabilités ont été découvertes dans les produits Netgate. Certaines d'entre elles permettent à un atta… 2026-10-02T17:34:54.595904+00:00 certfr-2026-avi-1022 https://cve.radiocsirt.org/vuln/euvd-2026-380807 EUVD-2026-380807 2026-10-02T17:34:54.595971+00:00 EUVD-2026-380807 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56128 fkie_cve-2026-56128 2026-10-02T17:34:54.596002+00:00

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall_schedule_edit.php. The schedule description is stored without HTML sanitization and subsequently inserted into an HTML attribute value in /firewall_rules.php with only single-quote escaping applied, permitting double-quote breakout. The payload executes in the browser of any user with the Firewall: Rules privilege who views the rules list with the affected schedule attached.

 https://cve.radiocsirt.org/vuln/ghsa-xqh2-9r6g-5jrx GHSA-xqh2-9r6g-5jrx 2026-10-02T17:34:54.596057+00:00

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall_schedule_edit.php. The schedule description is stored without HTML sanitization and subsequently inserted into an HTML attribute value in /firewall_rules.php with only single-quote escaping applied, permitting double-quote breakout. The payload executes in the browser of any user with the Firewall: Rules privilege who views the rules list with the affected schedule attached.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2836 WID-SEC-W-2026-2836 — Netgate pfSense: Mehrere Schwachstellen 2026-10-02T17:34:54.596097+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Netgate pfSense ausnutzen, um beliebigen Programmcode auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.