An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components.
https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/
https://docs.netgate.com/downloads/pfSense-SA-23_10.webgui.asc