Multiple vulnerabilities in Netgate products (August 14, 2026)

unknownCVE-2026-56127 CVE-2026-67189 CVE-2026-56126 CVE-2026-56128

Multiple vulnerabilities have been discovered in Netgate products. Some of them allow an attacker to cause remote arbitrary code execution, data confidentiality breach and data integrity breach.

CSIRTS triage

vendor: Netgate product: Netgate products Remote code execution Information disclosure Authentication bypass

What: Multiple vulnerabilities in Netgate products allow remote code execution, data confidentiality breaches, and data integrity breaches.
Who is affected: Netgate product deployments running vulnerable versions.
Urgency: Critical; remote code execution and data integrity issues in network infrastructure products require emergency patching.
Action: Apply Netgate security updates immediately for all affected products.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Netgate products

Get an email when a new Netgate products advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-14
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1022/

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-56127	coverage & exploitation status	NVD · CVE.org
CVE-2026-67189	coverage & exploitation status	NVD · CVE.org
CVE-2026-56126	coverage & exploitation status	NVD · CVE.org
CVE-2026-56128	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[NEW] [high] Netgate pfSense: Multiple vulnerabilitiescert-bund

Multiple vulnerabilities in Netgate products (August 14, 2026)

CSIRTS triage

Details

Referenced CVEs

Same CVEs, other sources

More from CERT-FR Avis de sécurité