Sploitus

25 exploited vulnerabilities in Pfsense

Vulnerabilities with publicly known exploits

Vendors
Pfsense, Netgate, Alt Linux, Unknown, Suricata, None
With known exploits
25
Affected Pfsense versions
= 2.8.0, 2.5.2, 2.2.6, 2.1.3, 2.5.0
Affected Netgate Pfsense versions
= 2.5.2, 2.4.4, 2.7.0, 2.4.1, 2.2, 2.1.3, 2.4.5, 2.2.2
Affected Opnsense Project Opnsense versions
< 16.1.16
Affected Oisf Suricata versions
= 1.4.6
Affected Pfsense Suricata Package versions
= 1.0.1
Affected Bsdperimeter Pfsense versions
= 2.0, 1.2.3

Vulnerabilities with exploits

Highest CVSS first — 16 of these already have exploit code on Sploitus

CVE-2025-69691 4 exploits
CVSS 9.9 CRITICAL 2026-02-17FIX AVAILABLE
CVE-2024-46538 4 exploits
CVSS 9.3 CRITICAL 2024-10-12FIX AVAILABLE
CVE-2021-41282 3 exploits
CVSS 9.0 HIGH 2022-03-01FIX AVAILABLE
CVE-2019-16701 3 exploits
CVSS 9.0 HIGH 2019-09-25FIX AVAILABLE
CVE-2016-10709 3 exploits
CVSS 9.0 HIGH 2018-01-22FIX AVAILABLE
CVE-2023-27253 4 exploits
CVSS 8.8 HIGH 2023-03-17FIX AVAILABLE
CVE-2019-16667 3 exploits
CVSS 8.8 HIGH 2019-09-26FIX AVAILABLE
CVE-2017-1000479 1 exploit
CVSS 8.8 HIGH 2018-01-03FIX AVAILABLE
CVE-2020-19678
CVSS 7.5 HIGH 2013-12-28FIX AVAILABLE
CVE-2018-20799
CVSS 7.5 HIGH 2019-03-01FIX AVAILABLE
CVE-2018-20798
CVSS 7.5 HIGH 2019-03-01FIX AVAILABLE
CVE-2015-2295 4 exploits
CVSS 6.8 MEDIUM 2015-04-10FIX AVAILABLE
CVE-2014-4688 8 exploits
CVSS 6.5 MEDIUM 2014-07-02FIX AVAILABLE
CVE-2022-42247
CVSS 6.1 MEDIUM 2022-10-03
CVE-2021-27933
CVSS 6.1 MEDIUM 2021-04-27FIX AVAILABLE
CVE-2019-12949 2 exploits
CVSS 6.1 MEDIUM 2019-06-25FIX AVAILABLE
CVE-2019-12347 2 exploits
CVSS 6.1 MEDIUM 2019-05-29
CVE-2023-42325
CVSS 5.4 MEDIUM 2023-10-31FIX AVAILABLE
CVE-2023-42327
CVSS 5.4 MEDIUM 2023-10-31
CVE-2020-19201
CVSS 5.4 MEDIUM 2021-07-12FIX AVAILABLE
CVE-2020-11457 3 exploits
CVSS 5.4 MEDIUM 2020-04-01FIX AVAILABLE
CVE-2015-4029
CVSS 4.3 MEDIUM 2015-08-18FIX AVAILABLE
CVE-2015-2294 4 exploits
CVSS 4.3 MEDIUM 2015-04-01FIX AVAILABLE
CVE-2010-4412 4 exploits
CVSS 4.3 MEDIUM 2010-12-07FIX AVAILABLE
CVE-2010-4246 1 exploit
CVSS 4.3 MEDIUM 2010-12-07FIX AVAILABLE