{"metadata": {"vulnerability": "CVE-2026-111229", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T04:48:59Z", "date_only": false, "value": "2026-10-15T04:48:59.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111229", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T18:21:23.312Z", "date_only": false, "value": "2026-10-15T18:21:23.312Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111229", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T18:46:30.058Z", "date_only": false, "value": "2026-10-15T18:46:30.058Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111229", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T18:46:30.058Z", "date_only": false, "value": "2026-10-15T18:46:30.058Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111229", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T19:06:43.778Z", "date_only": false, "value": "2026-10-15T19:06:43.778183Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117446489092635009", "record": "CVE-2026-111229", "field": "creation_timestamp", "uuid": "e9ec9077-0517-422a-8515-ae5e26972bd9", "content": "CVE-2026-111229 Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell metacharacters in ip or mac fields, which captiveportal_load_pfctl passes unescaped to a pfctl shell command.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111229https://github.com/abraxas/pfsense-cp-ha-pfctlhttps://abraxaslabs.tech/research/pfsense-ce-leftovershttps://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/captiveportal.inc#L2958-L2966https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_captiveportal_hasync.php#L106-L140https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-captive-portal-ha-sync#Netgate #pfSenseCE#CVE_2026_111229#bot", "url": "https://infosec.exchange/users/cve/statuses/117446489092635009"}, {"timestamp": "2026-10-15T19:17:35Z", "date_only": false, "value": "2026-10-15T19:17:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XF3X-9WQM-925C", "record": "GHSA-XF3X-9WQM-925C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T19:17:35.813Z", "date_only": false, "value": "2026-10-15T19:17:35.813", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111229", "record": "FKIE_CVE-2026-111229", "field": "published"}, {"timestamp": "2026-10-15T21:36:12Z", "date_only": false, "value": "2026-10-15T21:36:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XF3X-9WQM-925C", "record": "GHSA-XF3X-9WQM-925C", "field": "published"}, {"timestamp": "2026-10-15T21:36:12Z", "date_only": false, "value": "2026-10-15T21:36:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XF3X-9WQM-925C", "record": "GHSA-XF3X-9WQM-925C", "field": "modified"}, {"timestamp": "2026-10-16T16:29:17.145Z", "date_only": false, "value": "2026-10-16T16:29:17.145241Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111229", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:29:17.145Z", "date_only": false, "value": "2026-10-16T16:29:17.145241Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111229", "record": "FKIE_CVE-2026-111229", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T17:11:20.974Z", "date_only": false, "value": "2026-10-16T17:11:20.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111229", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:11:20.974Z", "date_only": false, "value": "2026-10-16T17:11:20.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111229", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:36.993Z", "date_only": false, "value": "2026-10-16T18:17:36.993", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111229", "record": "FKIE_CVE-2026-111229", "field": "lastModified"}]}