Cross-Site Scripting (XSS) vulnerability in the RSS Widget of Netgate pfSense Plus (versions 26.03, 25.11.1) and pfSense CE (version 2.8.1) allows… (CVE-2026-38961)
Description
A Cross-Site Scripting (XSS) vulnerability exists in the RSS Widget of Netgate pfSense Plus versions 26.03 and 25.11.1, as well as pfSense CE version 2.8.1. This vulnerability allows remote authenticated attackers to inject arbitrary JavaScript code via malicious RSS feed titles. The injected script executes in the browser of any authenticated user who views the dashboard, due to insufficient sanitization of the feed title data before rendering in the widget.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The RSS Widget in Netgate pfSense Plus (26.03, 25.11.1) and pfSense CE (2.8.1) contains an XSS vulnerability (CVE-2026-38961) that permits remote authenticated attackers to inject arbitrary JavaScript through crafted RSS feed titles. This occurs because the widget does not properly sanitize the feed title data before rendering it in the dashboard, enabling script execution in the context of authenticated users viewing the dashboard.
Potential Impact
Successful exploitation allows remote authenticated attackers to execute arbitrary JavaScript in the browsers of authenticated users who access the dashboard. This could lead to session hijacking, unauthorized actions, or other attacks within the context of the affected user's session. However, exploitation requires authentication and interaction with the dashboard.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the dashboard to trusted users only and avoid adding untrusted RSS feeds to the widget. Monitor vendor communications for updates regarding patches or official fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3pq2-4qp4-w69m
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-38961"]
- State
- PUBLISHED
Threat ID: 6a9c2651acd9273b49fca227
Added to database: 09/05/2026, 14:25:21 UTC
Last enriched: 09/07/2026, 12:53:59 UTC
Last updated: 10/18/2026, 18:48:20 UTC
Views: 42
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.