CVE-2026-78902
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package
- Published Sep 25, 2026
- CVSS 6.1 medium
- 0.3% chance of exploitation in the next 30 days (EPSS)