CVE-2026-119425

Vendor

Opnsense

Product

core

CVSS v3.1

5.4 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness

CWE-290

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 17
   CVE NVD 4d ago

   OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming feature that lets unauthenticated…

   OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming feature that lets unauthenticated attackers hijack authorized client sessions by spoofing unauthenticated MAC-to-IP…

   CVSS 5.4 CVE-2026-119425 Opnsense