pfSense-pkg-RESTAPI vulnerabilities

CVEs whose affected-version data names the pfSense-pkg-RESTAPI package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113779High· 8.8

today

pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts h…

▾ Twilightpfrest · pfSense-pkg-RESTAPIvia CVEORG