EIP-2026-110562

This exploit demonstrates a reflected XSS vulnerability in pfSense 2.3.2 that bypasses CSRF protections and leads to remote command execution as root via a reverse shell. The PoC includes JavaScript to extract CSRF tokens and execute system commands through the pfSense web interface.