{"metadata": {"vulnerability": "CVE-2026-111215", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T03:28:05Z", "date_only": false, "value": "2026-10-15T03:28:05.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111215", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T18:21:17.747Z", "date_only": false, "value": "2026-10-15T18:21:17.747Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111215", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T18:46:17.986Z", "date_only": false, "value": "2026-10-15T18:46:17.986Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111215", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T18:46:17.986Z", "date_only": false, "value": "2026-10-15T18:46:17.986Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111215", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:57:18.440Z", "date_only": false, "value": "2026-10-15T18:57:18.440797Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117446452042367979", "record": "CVE-2026-111215", "field": "creation_timestamp", "uuid": "7525e9db-ac38-4bc7-a4c9-966fcf59c8b8", "content": "CVE-2026-111215 Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd> via interfaces_wireless_edit.php or interfaces_assign.php, which interface_wireless_clone() interpolates unescaped into an ifconfig shell command.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111215https://github.com/abraxas/pfsense-wireless-clonehttps://abraxaslabs.tech/research/pfsense-ce-leftovershttps://github.com/abraxas/pfsense-assign-if-addhttps://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/interfaces.inc#L3370https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_wireless_edit.php#L77https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_assign.php#L187https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-os-command-injection-via-wireless-parent-interface#Netgate #pfSenseCE#CVE_2026_111215#bot", "url": "https://infosec.exchange/users/cve/statuses/117446452042367979"}, {"timestamp": "2026-10-15T19:17:33Z", "date_only": false, "value": "2026-10-15T19:17:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QCP6-4768-V6QQ", "record": "GHSA-QCP6-4768-V6QQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T19:17:33.757Z", "date_only": false, "value": "2026-10-15T19:17:33.757", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111215", "record": "FKIE_CVE-2026-111215", "field": "published"}, {"timestamp": "2026-10-15T19:43:24.462Z", "date_only": false, "value": "2026-10-15T19:43:24.462899Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111215", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T19:43:24.462Z", "date_only": false, "value": "2026-10-15T19:43:24.462899Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111215", "record": "FKIE_CVE-2026-111215", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T19:43:31.022Z", "date_only": false, "value": "2026-10-15T19:43:31.022Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111215", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T19:43:31.022Z", "date_only": false, "value": "2026-10-15T19:43:31.022Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111215", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T21:05:32.823Z", "date_only": false, "value": "2026-10-15T21:05:32.823", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111215", "record": "FKIE_CVE-2026-111215", "field": "lastModified"}, {"timestamp": "2026-10-15T21:36:09Z", "date_only": false, "value": "2026-10-15T21:36:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QCP6-4768-V6QQ", "record": "GHSA-QCP6-4768-V6QQ", "field": "published"}, {"timestamp": "2026-10-15T21:36:10Z", "date_only": false, "value": "2026-10-15T21:36:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QCP6-4768-V6QQ", "record": "GHSA-QCP6-4768-V6QQ", "field": "modified"}]}