CVE-2026-111220
CVE-2026-111220 · Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit crafted POST values that configure_cron() writes unescaped into /etc/crontab, running arbitrary root commands on schedule.
CVSS 8.6 · Hoch · EPSS 0,7%
- Veröffentlicht
- Aktualisiert
Betroffene Produkte und Versionen
pfsense ce
- Softwareversionen
- ≥ 0, ≤ 2.9.0: Betroffen (semver)
Keine Korrektur veröffentlicht
Originalquellen
- https://github.com/abraxas/pfsense-pppoe-cron
- https://abraxaslabs.tech/research/pfsense-ce-leftovers
- https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/interfaces.inc#L2174-L2214
- https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_ppps_edit.php#L271-L278
- https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/services.inc#L5652-L5660
- https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-crontab-injection-via-ppp-periodic-reset-ptpid
- https://nvd.nist.gov/vuln/detail/CVE-2026-111220