CVE-2026-111232 | Netgate pfSense CE up to 2.9.0 WebGUI display_separator separator[] cross site scripting

October 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Netgate pfSense CE up to 2.9.0. This affects the function display_separator of the component WebGUI. Such manipulation of the argument separator[] leads to cross site scripting.

This vulnerability is referenced as CVE-2026-111232. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More