CVE-2026-111230

Awaiting Analysis Awaiting Analysis - Queue

Local File Read in Netgate pfSense CE

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-16

EPSS Evaluated

2026-10-18

NVD

CVE-2026-111230

EUVD

EUVD-2026-102342

Affected Vendors & Products

Vendor	Product	Version / Range
Netgate	pfSense	CE 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

CVE-2026-111230 is a local file read vulnerability in Netgate pfSense CE through version 2.9.0. It allows users with Dynamic DNS client privileges to read arbitrary files as root by setting a file:// custom Update URL in the Dynamic DNS client configuration. Attackers can exploit this by setting a non-matching Result Match string, causing the system to log sensitive file contents like /conf/config.xml or /etc/master.passwd into the system log.

Detection Guidance

Check pfSense logs for suspicious Dynamic DNS client activity or file:// protocol usage in services_dyndns_edit.php. Inspect system logs for entries containing file contents like /conf/config.xml or /etc/master.passwd.

Impact Analysis

This vulnerability allows attackers with access to the Dynamic DNS client page to read sensitive system files, potentially exposing credentials, configuration data, or other confidential information. It could lead to further attacks like privilege escalation or unauthorized access to the pfSense system.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive files such as /conf/config.xml or /etc/master.passwd, which may contain configuration data, credentials, or other confidential information. For GDPR, this could result in unauthorized access to personal data, violating principles of data protection and confidentiality. For HIPAA, exposure of files containing protected health information (PHI) could lead to breaches of patient confidentiality and compliance violations.

Mitigation Strategies

Update pfSense to the latest version beyond 2.9.0. Restrict Dynamic DNS client access to trusted users only. Monitor logs for unauthorized file:// protocol usage in DDNS configurations.

Hi! I’m here to help you understand CVE-2026-111230. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70