CVE-2026-111226

{
  "etk_id": "ETK-2026-1714",
  "cve_id": "CVE-2026-111226",
  "display_id": "CVE-2026-111226",
  "ghsa_id": "GHSA-fm76-5wvr-6cv2",
  "euvd_id": "EUVD-2026-102338",
  "status": "published",
  "anchor_state": "anchored",
  "title": "OS command injection in pfSense CE Login Protection",
  "summary": "pfSense CE versions 2.4.5 through 2.9.0 are affected by an OS command injection flaw in Login Protection settings. An authenticated WebGUI user with Advanced Admin Access can cause commands to run as root by supplying crafted setting values.",
  "mitigation": "Restrict or remove Advanced Admin Access from WebGUI accounts that do not require it, and limit WebGUI access to trusted administrators and networks. No fixed version is recorded; avoid changing Login Protection settings with untrusted input until an updated release is available.",
  "vendor": "Netgate",
  "product": "pfSense CE",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 2.4.5, <= 2.9.0"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "pfSense CE",
      "purl": null
    }
  ],
  "cwes": [
    78
  ],
  "cvss_score": 8.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0655,
  "epss_percentile": 0.9375,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 19.861292,
  "t0_at": "2026-10-15T18:46:25.792000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-15T19:38:19.973214+00:00",
      "days": 0.03604376405092593,
      "is_lower_bound": false,
      "measured_at": "2026-10-15T18:46:25.792000+00:00",
      "url": "https://github.com/abraxas/pfsense-sshguard-crlf"
    },
    "trigger_signal": {
      "at": "2026-10-15T18:46:25.792000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-15T18:46:25.792000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111226"
    }
  }
}