CVE-2024-57273
Cross-site scripting in Netgate Pfsense Ce
CVSS score
5.4
EPSS probability
%1.3
Risk score
0.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack/
Makefile Go / Python
Similar Vulnerabilities
5.9
CVE-2023-48795
Vulnerability in N/a
N
Patch verified Public Exploits:3EPSS %94
8.6
CVE-2026-111231
Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()
N
Patch status unknown
8.6
CVE-2026-111229
Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync
N
Patch status unknown
8.6
CVE-2026-111226
Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php
N
Patch status unknown
8.6
CVE-2026-111223
Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner
N
Patch verified
8.6
CVE-2026-111220
Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
N
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-57273"