What’s Vulnerable › Vulnerabilities

CVE-2025-34176: Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-07-14
• Weakness: CWE-22

Description

In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be read, the server reveals whether the file exists, which enables an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions.

Affected products

• Netgate pfSense CE: before 2.8.0 — fixed in 2.8.0

How to fix

Upgrade to a fixed version: Netgate pfSense CE 2.8.0. Check the vendor advisory for mitigations.

References

• https://github.com/pfsense/FreeBSD-ports/commit/97852ccfd201b24ee542be30af81272485fde0b4
• https://redmine.pfsense.org/issues/16414
• https://www.vulncheck.com/advisories/netgate-pf-sense-ce-suricata-directory-traversal-information-disclosure

Get alerted when CVE-2025-34176 or the next vulnerability affects your stack