HIGHCVSS v3.1 7.2Vulnerability
CVE-2026-111214
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a crafted 'if' value, then edit the QinQ entry so it is interpolated into ifconfig shell commands, executing commands as root.
Properties
- Severity
- HIGH
- Licence
- FIRST EPSS: free to use; attribution requested in publications or products (FAQ)
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.10005
- Cvss severity
- HIGH
- Cvss score
- 7.2
- Signal source
- FIRST EPSS
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Licence nc
- Commercial ok
- true
- Enriched batch id
- epss_history-20261020T134102Z-d1edf9
- Last source
- FIRST EPSS
- Score
- 7.2
- Cvss version
- 3.1
- Cve id
- CVE-2026-111214
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-10-18T13:39:03+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-10-15T19:17:33.603
- Last modified
- 2026-10-19T20:44:11.483
Related Entities (2)
AFFECTS_PRODUCT (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph