Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.
- https://www.esecforte.com/cve-2023-29973-no-rate-limit/
No PoCs found on GitHub currently.