Approved changes feed: RSS · Atom

cpe:2.3:a:pfsense:pfsense:2.7.2:*:*:*:community:*:*:*

part: a version: 2.7.2 update: *

VendorPfsense (16119953-645e-5c83-888a-eeb9b3a567ca)
ProductPfsense (9a2d153d-225b-5e7e-b5c7-b1e06bfbde2d)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/pfsense/pfsense purl2cpe 2026-06-01 10:14:57.735673

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-69690 vulnerable 2026-06-08 07:43:13.745385 Details available
Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execute PHP code.
Published: 2026-05-08T00:00:00.000Z
Updated: 2026-05-08T21:29:10.073Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.