Sploitus

21 exploited vulnerabilities in Pfsense Ce

Vulnerabilities with publicly known exploits

Vendors
Netgate, Openvpn, Unknown, Suricata, Haproxy, Open Information Security Foundation
With known exploits
21
Affected Netgate Pfsense Plus versions
= 22.05.1, 25.03, 23.05.1
Affected Pfsense versions
= 2.6.0, 2.7.2, 2.8.0
Affected Netgate Pfsense Ce versions
< 2.8.0
Affected Netgate Pfsense versions
≤ 2.7.0, 2.4.4
Affected Pfsense Pfsense Plus versions
< 22.01

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2023-27100 7 exploits
CVSS 9.8 CRITICAL 2023-03-22FIX AVAILABLE
CVE-2025-69690 4 exploits
CVSS 9.1 CRITICAL 2026-05-08
CVE-2024-54780
CVSS 8.8 HIGH 2024-11-15FIX AVAILABLE
CVE-2025-12490
CVSS 8.8 HIGH 2025-10-30
CVE-2023-48123 1 exploit
CVSS 8.8 HIGH 2023-12-06FIX AVAILABLE
CVE-2018-4021
CVSS 7.2 HIGH 2018-12-03
CVE-2018-4020
CVSS 7.2 HIGH 2018-12-03
CVE-2018-4019
CVSS 7.2 HIGH 2018-12-03
CVE-2025-53392 1 exploit
CVSS 6.5 MEDIUM 2025-06-28FIX AVAILABLE
CVE-2025-34175
CVSS 6.1 MEDIUM 2025-09-09
CVE-2025-34172
CVSS 6.1 MEDIUM 2025-09-09
CVE-2022-23993
CVSS 6.1 MEDIUM 2022-01-26FIX AVAILABLE
CVE-2024-57273
CVSS 5.4 MEDIUM 2024-11-15FIX AVAILABLE
CVE-2024-54779
CVSS 5.4 MEDIUM 2024-11-15FIX AVAILABLE
CVE-2025-34178
CVSS 5.4 MEDIUM 2025-09-09
CVE-2025-34177
CVSS 5.4 MEDIUM 2025-09-09
CVE-2025-34174
CVSS 5.4 MEDIUM 2025-09-09
CVE-2023-42325
CVSS 5.4 MEDIUM 2023-10-31FIX AVAILABLE
CVE-2025-34176
CVSS 5.3 MEDIUM 2025-09-09
CVE-2025-34173
CVSS 5.3 MEDIUM 2025-09-09
CVE-2023-29973
CVSS 4.9 MEDIUM 2023-10-24FIX AVAILABLE