pfSense bugtracker

07/09/2026

07:02 PM pfSense Packages Bug #16934 (Resolved): Potential XSS in nmap scan output

reproduced on the earlier versions
fixed in current package version for 26.03.1
tested on
26.03.1-RELEASE (amd64... Georgiy Tyutyunnik

02:23 PM pfSense Packages Bug #16935 (Resolved): Potential Stored XSS in siproxd package file ``siproxd_registered_phones.php`` from crafted registration data

reproduced in earlier versions, can't reproduce in
26.03.1-RELEASE (amd64)
built on Wed May 20 15:19:00 UTC 2026
... Georgiy Tyutyunnik

01:17 PM pfSense Plus Bug #16937: Unbound aborts, and DNS stops resolving after restarted while using "Respond to incoming SSL/TLS queries from local clients" option

can't reproduce with stock config on 26.03.1, unbound config verified to match the forum thread
can you add the fu... Georgiy Tyutyunnik

07/03/2026

04:06 PM pfSense Bug #16922 (Resolved): Captive Portal authentication failures from usernames containing special characters or long strings can cause ambiguous or confusing log messages

can't reproduce on the latest 26.07
tested on:
26.07-BETA (amd64)
built on Thu Jul 2 23:42:00 UTC 2026
FreeBSD 16... Georgiy Tyutyunnik

07/02/2026

11:23 AM pfSense Docs Correction #16340 (Confirmed): Routed IPsec Tunnels (VTI) Don't Allow For ANY Policy Routing

tested on
26.03.1-RELEASE (amd64)
built on Wed May 20 15:19:00 UTC 2026
FreeBSD 16.0-CURRENT
currently there ar... Georgiy Tyutyunnik

06/26/2026

02:54 PM pfSense Todo #16905 (Resolved): Encode Dynamic DNS credentials when passed as URL parameters

tested on:
2.8.1-RELEASE (amd64)
built on Wed May 13 19:43:00 UTC 2026
FreeBSD 15.0-CURRENT
patch fixes the issue Georgiy Tyutyunnik

06/24/2026

11:58 AM pfSense Bug #16764 (Ready To Test): IPSec VTI assigned interfaces generating an incorrect table for /32 addresses

I still can consistently reproduce it, with the exact phase2 config from the attached s_o
you need to have local and ... Georgiy Tyutyunnik

06/10/2026

08:23 AM pfSense Packages Bug #16893 (Confirmed): pfBlockerNG can create inconsistency in default Firewall Maximum Table Entries value

Steps to reproduce:
1) set Firewall Maximum Table Entries value to none, thus setting it to a default value;
2) ins... Georgiy Tyutyunnik

06/05/2026

11:53 AM pfSense Bug #16868 (Confirmed): Static route with Alias as destination network doesn't install itself in the routing table under some conditions

Steps to reproduce the issue:
1) HA cluster with a routed IPSec to a remote host. IPSec tunnel source IP is the CARP... Georgiy Tyutyunnik

05/14/2026

11:27 AM pfSense Regression #16825 (Resolved): Shared Key OpenVPN tunnels need directive to bypass deprecation error

tested on:
26.07-DEVELOPMENT (amd64)
built on Thu May 14 6:00:00 UTC 2026
FreeBSD 16.0-CURRENT
works, openvpn s... Georgiy Tyutyunnik