{"schema":"vulnpedia.research/1","cve":"CVE-2026-111229","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/abraxas/pfsense-cp-ha-pfctl","tags":["exploit","technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","url":"https://github.com/abraxas/pfsense-cp-ha-pfctl"},{"source":"nvd","sourceId":"CVE-2026-111229","modified":"2026-10-16T18:17:36.993","url":"https://github.com/abraxas/pfsense-cp-ha-pfctl"}]},{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers"},{"source":"nvd","sourceId":"CVE-2026-111229","modified":"2026-10-16T18:17:36.993","url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/captiveportal.inc#L2958-L2966","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/captiveportal.inc#L2958-L2966"},{"source":"nvd","sourceId":"CVE-2026-111229","modified":"2026-10-16T18:17:36.993","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/captiveportal.inc#L2958-L2966"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_captiveportal_hasync.php#L106-L140","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_captiveportal_hasync.php#L106-L140"},{"source":"nvd","sourceId":"CVE-2026-111229","modified":"2026-10-16T18:17:36.993","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_captiveportal_hasync.php#L106-L140"}]},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-captive-portal-ha-sync","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:30.058Z","url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-captive-portal-ha-sync"},{"source":"nvd","sourceId":"CVE-2026-111229","modified":"2026-10-16T18:17:36.993","url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-captive-portal-ha-sync"}]},{"source":"euvd","sourceId":"EUVD-2026-102341","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102341","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102341","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102341"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}