CVE-2026-67189 vulnerability in Netgate Products
Published on August 19, 2026
pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record
pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink in the administrator interface. An attacker who controls a PTR record and generates sufficient traffic to appear as a top talker can execute arbitrary JavaScript in an administrator's browser, gaining access to the authenticated session context and same-origin access to the firewall management interface, enabling account creation and arbitrary OS command execution.
Vulnerability Analysis
CVE-2026-67189 can be exploited with network access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2026-67189 has been classified to as a XSS vulnerability or weakness.
Products Associated with CVE-2026-67189
stack.watch emails you whenever new vulnerabilities are published in Netgate Pfsense Plus or Netgate Pfsense Ce. Just hit a watch button to start following.
Affected Versions
Netgate pfSense Plus:- Before 26.07 is affected.
- Before and including 2.8.1 is affected.