CVE-2026-111231 - Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()
CVE ID :CVE-2026-111231 Published : Oct. 15, 2026, 7:17 p.m. | 16 minutes ago Description :Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User -...