CVE-2026-56128 | Netgate pfSense Plus/pfSense CE Schedule firewall_schedule_edit.php descr cross site scripting

A vulnerability, which was classified as problematic, has been found in Netgate pfSense Plus and pfSense CE. Affected is an unknown function of the file firewall_schedule_edit.php of the component Schedule. The manipulation of the argument descr leads to cross site scripting.

This vulnerability is documented as CVE-2026-56128. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More