GCVE - cpe:2.3:a:pfsense:pfsense:2.6.0:*:*:*:community:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pfsense:pfsense:2.6.0:*:*:*:community:*:*:*

part: a version: 2.6.0 update: *

Vendor	Pfsense (`16119953-645e-5c83-888a-eeb9b3a567ca`)
Product	Pfsense (`9a2d153d-225b-5e7e-b5c7-b1e06bfbde2d`)
Edition	*
Language	*
Software edition	community
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/pfsense/pfsense`	purl2cpe	2026-06-01 10:14:57.732266

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-29975`	vulnerable	2026-06-08 06:02:40.799488	Details available An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification. Published: 2023-11-09T00:00:00.000Z Updated: 2024-09-04T13:53:07.278Z Open on db.gcve.eu Reference links https://www.esecforte.com/cve-2023-29975-unverified-password-changed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29974`	vulnerable	2026-06-08 06:02:40.799057	Details available An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements. Published: 2023-11-08T00:00:00.000Z Updated: 2024-09-04T19:02:33.953Z Open on db.gcve.eu Reference links https://www.esecforte.com/cve-2023-29974-weak-password-policy/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29973`	vulnerable	2026-06-08 06:02:40.798583	Details available Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall. Published: 2023-10-24T00:00:00.000Z Updated: 2024-09-17T13:43:23.276Z Open on db.gcve.eu Reference links https://www.esecforte.com/cve-2023-29973-no-rate-limit/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27100`	vulnerable	2026-06-08 05:57:40.645136	Details available Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests. Published: 2023-03-22T00:00:00.000Z Updated: 2025-02-25T21:10:13.968Z Open on db.gcve.eu Reference links https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc https://redmine.pfsense.org/issues/13574 http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.