← Database

CVE-2022-31814

CRITICAL CVSS: 9.8 Published: 2022-09-05 Modified: 2026-06-17

Description

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Affected Platforms

Netgate Pfblockerng

Weakness Type

CWE-78, CWE-78

References