Open Source Firewall pfsense Vulnerable to Remote Code Execution Attacks

A remote code execution vulnerability (CVE-2022-31814) affecting pfSense with the pfBlockerNG package was analyzed: initial exploit attempts failed due to Python/PHP version differences, researchers modified scripts to work across environments and successfully wrote a PHP webshell; an updated multi-payload exploit has been published to increase success against diverse targets, highlighting the need for timely patching and configuration audits.