{"schema":"vulnpedia.research/1","cve":"CVE-2026-111223","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/abraxas/pfsense-ipsec-login-banner","tags":["exploit","technical-description","Mitigation","Third Party Advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://github.com/abraxas/pfsense-ipsec-login-banner"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://github.com/abraxas/pfsense-ipsec-login-banner"}]},{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","tags":["technical-description","Issue Tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers"}]},{"url":"https://abraxaslabs.tech/research/pfsense-ipsec-login-banner","tags":["technical-description","Exploit","Issue Tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://abraxaslabs.tech/research/pfsense-ipsec-login-banner"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://abraxaslabs.tech/research/pfsense-ipsec-login-banner"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1361-L1388","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1361-L1388"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1361-L1388"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1842-L1845","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1842-L1845"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1842-L1845"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/vpn_ipsec_mobile.php#L269-L273","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/vpn_ipsec_mobile.php#L269-L273"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/vpn_ipsec_mobile.php#L269-L273"}]},{"url":"https://github.com/pfsense/pfsense/commit/27a52d0807","tags":["technical-description","patch","Patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://github.com/pfsense/pfsense/commit/27a52d0807"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://github.com/pfsense/pfsense/commit/27a52d0807"}]},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-ipsec-mobile-login-banner","tags":["third-party-advisory","Third Party Advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.730Z","url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-ipsec-mobile-login-banner"},{"source":"nvd","sourceId":"CVE-2026-111223","modified":"2026-10-19T20:43:24.317","url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-ipsec-mobile-login-banner"}]},{"source":"euvd","sourceId":"EUVD-2026-102335","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102335","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102335","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102335"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}