Home › pfSense › CE 2.9.0

pfSense CE 2.9.0 – safe to update?

Security update: this release fixes security issues (highest CVSS 8.5). Waiting carries its own risk — if your device is exposed, weigh that against the reports below.

What's in this release

CVEs fixed

• CVE-2026-97730 HIGH 8.5 (NVD: fixed in this version)
  In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an authenticated attacker to execute arbitrary PHP code. To exploit this, an attacke…
• CVE-2026-56126 MEDIUM 5.1 (NVD: fixed in this version)
  pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /status_monitoring.php. Multiple POST parameters including graph-left, graph-rig…
• CVE-2026-56127 MEDIUM 5.1 (NVD: fixed in this version)
  pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall_rules_edit.php. The firewall rule description is stored in the pfSense XML con…
• CVE-2026-56128 MEDIUM 5.1 (NVD: fixed in this version)
  pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall_schedule_edit.php. The schedule description is stored without HTML sanitiz…

Community reports

• Problem [2.9.0 CE] Fatal Trap 12: Page fault while in kernel mode · Reddit · 2026-10-02

  After upgrading from version 2.8.1 to 2.9.0, the system failed to come back online. As it turned out, it crashed with the error: 'Fatal Trap 12: Page fault while in kernel mode'. This is one of those YanLing J4125-type boxes. I initially suspected bad memory, so I ran memtest86…

• Problem Packet loss spikes since 2.9.0. · Reddit · 2026-09-16

  Hi, I'm getting spikes of packet losses since upgrading to 2.9.0 on my WAN. Before it was fairly constant with 0-2% loss, now it's 0 or close to 0 or a spike to 2-5% or a big spike of over 50% occasionally, enough to trigger gateway monitoring to consider itself down. Hardware i…

• Problem After upgrade to 2.9.0, pfBlockerNG service will not start. · Reddit · 2026-09-15

• Problem IPsec site-to-site: no traffic is passing through after CE 2.9.0 update (High Availability - primary firewall only) · Reddit · 2026-09-14

  I work for a small/medium-sized company, and we have two sites. Both sites have two pfSense firewalls configured in High Availability. IPsec site-to-site is configured between the two sites. When CE 2.9.0 was released, I upgraded the backup firewall at our office from CE 2.8.1.…

• Problem CE2.9 - Continuing issues with unbound queue overflows · Reddit · 2026-09-14

  Another week another unbound crashout. This is a follow up to my post from last week here: https://old.reddit.com/r/PFSENSE/comments/1w7yaxh/ce_29_kea_and_unbound_stuck_waiting_on_each_other/ Like clockwork, nearly down to the second, ~40 minutes after pfblocker's cron run occur…

• Mention pfSense Theme. Message me if your interested. · Reddit · 2026-10-14

  I created this pfsense theme with matching login page. Fully working. Please let me know what you think. https://preview.redd.it/mtuq2jv87evh1.png?width=2046&format=png&auto=webp&s=cff822fe447a3d78418f614101eacf3ac47fc35b https://preview.redd.it/iguy0jv87evh1.png?width=2030&form…

• Mention Almost impossible Netgate Installer download...(or "how to download 2.9.0!") · Reddit · 2026-10-02

  Not only do they make their new process with the installer pretty crazy, currently their website doesn't render the chooser they demand you use. You can click "add to cart" without selecting something, you empty the cart, go back to the netgate installer page...and there's no wa…

• Mention Dual WAN not working · Reddit · 2026-09-27

  Hi, first of all: 4 senses, FRR with OSPF, 2 with dual WAN, 1 with failover dual WAN, 1 with cellular WAN only. 1 Dell R210 II / pfSense 2.9.0 / VDSL + fiber, PPPoE 1 Fujitsu Futro S720 / pfSense 2.8.0 / VDSL + fiber, PPPoE 1 Terra BlackDwarf G5 / pfSense 2.9.0 / Cellular DHCP 1…

• Mention Roadmap moved? · Reddit · 2026-09-25

  Until recently, the CE roadmap was found here https://redmine.pfsense.org/projects/pfsense/roadmap#2.9.0 but now that page requires credentials. Is it moved elsewhere or is it only for account holders?

• Mention Read-only MCP on pfrest so I stop screenshotting the webGUI for AI help · Reddit · 2026-09-23

  Same loop every time: pfSense webGUI, firewall, aliases, DHCP, WireGuard, screenshot, paste, agent wants one more page. I put a read-only MCP server on top of pfSense-pkg-RESTAPI (pfrest): X-API-Key GET only Redacts WireGuard private/preshared keys, passwords, bcrypt hashes, etc…

• Mention Unbound CVE-2026-81642 · Reddit · 2026-09-18

  There seems to be some severe CVE (score 9.1) in Unbound DNS-service - see https://www.cve.org/CVERecord?id=CVE-2026-81642 . On pfSense CE 2.9.0 version 1.25.2 is used as far as I can see. Is there some ETA when we get the latest version 1.26.1? Thank you!

• Mention Using ZFS on cheap NVMe drives is a bad idea. · Reddit · 2026-09-10

  My lab appliance crashed today. SSD failure essentially. It rebooted but... I learned two things I want to share with the community. I was about to upgrade from pfSense CE 2.8.1 to 2.9.0. I probably dodged a bullet there, because pfSense does not automatically monitor hard drive…

Reports are found automatically and labelled by an AI model plus keyword rules — they can be wrong. Open the post to judge for yourself.

← pfSense CE 2.8.1

Other pfSense versions

• CE 2.9.0 2026-08-20
• Plus 26.07 2026-08-13
• Plus 26.03.1 2026-05-27
• Plus 26.03 2026-04-01
• Plus 25.11.1 2026-01-26
• Plus 25.11 2025-12-11
• CE 2.8.1 2025-09-04
• Plus 25.07.1 2025-08-18