CVE-2020-26693: Pfsense

Medium severity, CVSS 5.4. EPSS: 5.3% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of the load_balancer_monitor.php function.

Affected products

• Pfsense Pfsense: version 2.4.5 only

Published 2021-06-01. Last modified 2026-06-17.