Skip to content
Threat Feed
Subscribe

Product

PfSense-Pkg-RESTAPI (< 2.9.0)

1 brief RSS
high advisory

pfSense-pkg-RESTAPI: Privilege escalation via Scoped HA Settings Sync (CVE-2026-113779)

Authenticated users with the 'Scoped HA Settings Sync' permission can exploit CVE-2026-113779 in pfSense-pkg-RESTAPI versions prior to 2.9.0 to modify API configuration secrets and achieve full administrative privilege escalation.

pfSense-pkg-RESTAPI privilege-escalation pfsense api-security
1t 1c