CVE-2026-78849
NONE—CVSS v3
—CVSS v2
0.26%
EPSS (exploit probability)
—CWE
Description
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions <= 26.03 pfSense CE software versions <= 2.8.1 allows a remote attacker to execute arbitrary code via the captive_portal_status.widget.php file
Affected routers (0)
No routers currently mapped to this CVE in our database.