https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:45:47.165674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-34172 CVE-2025-34172 — Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting 2026-10-05T07:45:47.310563+00:00

Affected: Netgate pfSense CE

In pfSense CE /usr/local/www/haproxy/haproxy_stats.php, the value of the showsticktablecontent parameter is displayed after being read from HTTP GET requests. This can enable reflected cross-site scripting when the victim is authenticated.