Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-78902: XSS to RCE in pfSense with one DNS request

netspi.com | vulnerability | CVE-2026-78902 | #rce | #xss | #vulnerability-analysis | #exploit-chain | #firewall | #pfsense | #cve-2026-78902 | #pfblockerng

Summary

NetSPI reports CVE-2026-78902, a stored cross-site scripting issue in the pfSense pfBlockerNG package that can be escalated to remote code execution with a single DNS request.
CVE
CVE-2026-78902
Published
Collected

original ↗

Related coverage

vulnerability · bugcrowd.com
Big Bugs | Episode 5: Big XSS–Not an Oxymoron
Big Bugs Episode 5 argues that 'big XSS' is not an oxymoron: though XSS is often dismissed as low-hanging fruit, exploit chains show it can drive ransomware and full account takeover.
vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-1040 Sophos XG Firewall Authentication bypass
Analysis of Sophos XG Firewall CVE-2022-1040: mapping its Apache-Jetty-CSC-Perl architecture and the patch, whose JSON filter strips non-printable characters, exposing the parsing flaw.
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
vulnerability · netspi.com
CVE-2026-0300 Palo Alto Networks PAN-OS Buffer Overflow Overview & Takeaways
CVE-2026-0300 is a pre-auth buffer overflow in the PAN-OS User-ID Authentication Portal giving unauthenticated root RCE on PA-Series and VM-Series firewalls, already exploited in the wild.
back