{"vulnerability": "CVE-2026-78849", "sightings": [{"uuid": "b3d2936b-09a9-4e26-b8a8-2f9e6110ccad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78849", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvddud2unf27", "content": "CVE-2026-78849 - XSS in Netgate pfSense (Plus <=26.03 & CE <=2.8.1). Remote code execution via captive_portal_status.widget.php. Unpatched. CVSS N/A. Isolate exposed firewalls & monitor logs. Details: https://www.valtersit.com/cve/CVE-2026-78849/ #CVE #pfSense #infosec", "creation_timestamp": "2026-09-12T15:00:05.380885Z"}, {"uuid": "c6046765-897e-4d58-824d-31dbd9f5f460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78849", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117258662904310562", "content": "CVE-2026-78849 - XSS in Netgate pfSense (Plus <=26.03 & CE <=2.8.1). Remote code execution via captive_portal_status.widget.php. Unpatched. CVSS N/A. Isolate exposed firewalls & monitor logs. Details: https://www.valtersit.com/cve/CVE-2026-78849/ #CVE #pfSense #infosec", "creation_timestamp": "2026-09-12T15:00:11.207172Z"}]}