Skip to content

CVE record · 1 source

CVE-2026-119424

CVSS 6.8

OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wireless-edit privilege to…

Vendor: Opnsense
Product: core
CVSS v3.1: 6.8 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness: CWE-93
Exposure class: Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

17

CVE NVD 4d ago

OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wireless-edit privilege to…

OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wireless-edit privilege to inject directives by embedding CR/LF characters in WPA fields. Attackers can place…

CVSS 6.8 CVE-2026-119424 Opnsense