CVE-2023-29973: Pfsense

Medium severity, CVSS 4.9. EPSS: 1.6% chance of exploitation in the next 30 days.

Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.

Affected products

Published 2023-10-25. Last modified 2026-06-17.