CVE-2022-26019

Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution.

• CWE-22

• https://docs.netgate.com/downloads/pfSense-SA-22_01.webgui.ascMitigation, Patch, Vendor Advisory
• https://jvn.jp/en/jp/JVN87751554/index.htmlPatch, Third Party Advisory
• https://docs.netgate.com/downloads/pfSense-SA-22_01.webgui.ascMitigation, Patch, Vendor Advisory
• https://jvn.jp/en/jp/JVN87751554/index.htmlPatch, Third Party Advisory

Published

Mar 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26006Improper input validation in the BIOS firmware for some Inte…6.7
• CVE-2022-26007An OS command injection vulnerability exists in the console …7.2
• CVE-2022-26009A stack-based buffer overflow vulnerability exists in the co…9.8
• CVE-2022-2601A buffer overflow was found in grub_font_construct_glyph(). …8.6
• CVE-2022-26013Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-26017Improper access control in the Intel(R) DSA software for bef…8
• CVE-2022-2602io_uring UAF, Unix SCM garbage collection7
• CVE-2022-26020An information disclosure vulnerability exists in the router…6.5
• CVE-2022-26022Omron CX-Position (versions 2.5.3 and prior) is vulnerable t…7.8
• CVE-2022-26023A leftover debug code vulnerability exists in the console ve…6.5
• CVE-2022-26024Improper access control in the Intel(R) NUC HDMI Firmware Up…7.8
• CVE-2022-26026A denial of service vulnerability exists in the OAS Engine S…7.5