Is CVE-2026-111225 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111225?

CVE-2026-111225 has a CVSS v3 severity of MEDIUM (5).

Back

CVE-2026-111225

Description

Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolated unquoted into su -c strings, when DNS Resolver client registration is enabled.