Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Netgate — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting Netgate. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Netgate develops network security solutions, primarily focusing on firewall and VPN technologies using pfSense and OPNsense platforms. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and authentication issues. The company has addressed security concerns through regular patches, though some incidents have exposed weaknesses in default configurations and administrative interfaces. Netgate's products remain widely deployed in enterprise environments, requiring careful hardening to mitigate risks associated with their 16 documented CVEs. Security researchers have noted that while vulnerabilities exist, prompt vendor response typically limits exploitation potential in properly maintained deployments.

CVE IDTitleCVSSSeverityPublished
CVE-2016-20058 Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation — NETGATE AMITI AntivirusCWE-428 7.8 High2026-04-04
CVE-2016-20057 NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation — NETGATE Registry CleanerCWE-428 7.8 High2026-04-04
CVE-2019-25271 NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path — Data BackupCWE-428 7.8 High2026-02-04
CVE-2019-25269 Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability — Amiti AntivirusCWE-428 7.8 High2026-02-04
CVE-2025-12490 Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability — pfSenseCWE-22 8.8 -2025-11-06
CVE-2025-34178 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting — pfSense CECWE-79 5.4AIMediumAI2025-09-09
CVE-2025-34177 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting — pfSense CECWE-79 5.4AIMediumAI2025-09-09
CVE-2025-34176 Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure — pfSense CECWE-22 4.3AIMediumAI2025-09-09
CVE-2025-34175 Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting — pfSense CECWE-79 6.1AIMediumAI2025-09-09
CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting — pfSense CECWE-79 5.4AIMediumAI2025-09-09
CVE-2025-34173 Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure — pfSense CECWE-22 4.3AIMediumAI2025-09-09
CVE-2025-34172 Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting — pfSense CECWE-79 6.1AIMediumAI2025-09-09
CVE-2025-53392 Netgate pfSense CE 安全漏洞 — pfSenseCWE-36 5.0 Medium2025-06-28
CVE-2018-4019 Netgate pfSense CE 命令注入漏洞 — Netgate pfSense 7.2 -2018-12-03
CVE-2018-4020 Netgate pfSense CE 操作系统命令注入漏洞 — Netgate pfSense 7.2 -2018-12-03
CVE-2018-4021 Netgate pfSense CE 命令注入漏洞 — Netgate pfSense 7.2 -2018-12-03

This page lists every published CVE security advisory associated with Netgate. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.