CVE-2026-110908Published

Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filt…

cve-program · CVE-2026-110908

Published

pfSense-pkg-frr

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unknown",
                    "packageName": "pfSense-pkg-frr",
                    "product": "pfSense-pkg-frr",
                    "repo": "https://github.com/pfsense/FreeBSD-ports",
                    "vendor": "Netgate",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "2.0.2_1",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.1.2_1",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON