Cpe:2.3:a:netgate:pfsense:2.7.0:*:*:*:*:*:*:*

Authenticated users with QinQ edit privileges can leverage an OS command injection vulnerability in Netgate pfSense CE 2.7.0 through 2.9.0 to execute arbitrary commands as root.