CVE-2014-4691: Netgate Pfsense

Medium severity, CVSS 6.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Session fixation vulnerability in pfSense before 2.1.4 allows remote attackers to hijack web sessions via a firewall login cookie.

Affected products

• Netgate Pfsense: up to and including 2.1.3

Published 2014-07-02. Last modified 2026-06-17.