agentprime: opnsense-coreEvery new CVE for opnsense-core.https://agentprime.io/CVE-2026-57154: OPNsense: Configuration line injection via multiple GUI text fieldshttps://agentprime.io/advisories/CVE-2026-57154/https://agentprime.io/advisories/CVE-2026-57154/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:10:28 GMTCVECVE-2026-119560: OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fieldshttps://agentprime.io/advisories/CVE-2026-119560/https://agentprime.io/advisories/CVE-2026-119560/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:31:08 GMTCVECVE-2026-119425: OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARPhttps://agentprime.io/advisories/CVE-2026-119425/https://agentprime.io/advisories/CVE-2026-119425/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:30:55 GMTCVECVE-2026-119424: OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identityhttps://agentprime.io/advisories/CVE-2026-119424/https://agentprime.io/advisories/CVE-2026-119424/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:30:54 GMTCVECVE-2026-119423: OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Usernamehttps://agentprime.io/advisories/CVE-2026-119423/https://agentprime.io/advisories/CVE-2026-119423/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:30:53 GMTCVECVE-2026-119409: OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Settinghttps://agentprime.io/advisories/CVE-2026-119409/https://agentprime.io/advisories/CVE-2026-119409/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:30:46 GMTCVECVE-2026-71490: OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protectionhttps://agentprime.io/advisories/CVE-2026-71490/https://agentprime.io/advisories/CVE-2026-71490/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:24:43 GMTCVECVE-2026-63442: OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blockinghttps://agentprime.io/advisories/CVE-2026-63442/https://agentprime.io/advisories/CVE-2026-63442/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:22:16 GMTCVECVE-2026-58390: OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status viewshttps://agentprime.io/advisories/CVE-2026-58390/https://agentprime.io/advisories/CVE-2026-58390/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:21:09 GMTCVECVE-2026-58394: OPNsense: Stored XSS in Administration Settings via Certificate Descriptionhttps://agentprime.io/advisories/CVE-2026-58394/https://agentprime.io/advisories/CVE-2026-58394/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:20:15 GMTCVECVE-2026-58392: OPNsense: Stored XSS in Services: NTP GPShttps://agentprime.io/advisories/CVE-2026-58392/https://agentprime.io/advisories/CVE-2026-58392/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:18:32 GMTCVECVE-2026-58395: OPNsense: XPath injection in MVC safe-deletehttps://agentprime.io/advisories/CVE-2026-58395/https://agentprime.io/advisories/CVE-2026-58395/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:16:49 GMTCVECVE-2026-58393: OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO fileshttps://agentprime.io/advisories/CVE-2026-58393/https://agentprime.io/advisories/CVE-2026-58393/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:15:45 GMTCVECVE-2026-57155: OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importerhttps://agentprime.io/advisories/CVE-2026-57155/https://agentprime.io/advisories/CVE-2026-57155/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:13:12 GMTCVEcriticalCVE-2026-58391: OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakouthttps://agentprime.io/advisories/CVE-2026-58391/https://agentprime.io/advisories/CVE-2026-58391/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:12:08 GMTCVECVE-2026-53582: OPNsense: XPATH Injection can disclose any secret in config.xmlhttps://agentprime.io/advisories/CVE-2026-53582/https://agentprime.io/advisories/CVE-2026-53582/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:08:46 GMTCVECVE-2026-53581: ntp: write path traversalhttps://agentprime.io/advisories/CVE-2026-53581/https://agentprime.io/advisories/CVE-2026-53581/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 23:02:07 GMTCVEcriticalCVE-2026-45158: OPNsense: Command Injection via Attacker-Controlled DHCP Confighttps://agentprime.io/advisories/CVE-2026-45158/https://agentprime.io/advisories/CVE-2026-45158/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:54:31 GMTCVEcriticalCVE-2026-44194: OPNsense: RCE on user managmenthttps://agentprime.io/advisories/CVE-2026-44194/https://agentprime.io/advisories/CVE-2026-44194/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:53:27 GMTCVEcriticalCVE-2026-44195: OPNsense: Authentication lockout bypasshttps://agentprime.io/advisories/CVE-2026-44195/https://agentprime.io/advisories/CVE-2026-44195/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:52:42 GMTCVECVE-2026-44193: OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` methodhttps://agentprime.io/advisories/CVE-2026-44193/https://agentprime.io/advisories/CVE-2026-44193/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:52:04 GMTCVEcriticalCVE-2026-34578: OPNsense has an LDAP Injection via Unsanitized Username in Authenticationhttps://agentprime.io/advisories/CVE-2026-34578/https://agentprime.io/advisories/CVE-2026-34578/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 14:34:20 GMTCVECVE-2026-30868: Cross-Site Request Forgery (CSRF) in opnsense/corehttps://agentprime.io/advisories/CVE-2026-30868/https://agentprime.io/advisories/CVE-2026-30868/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 16:38:12 GMTCVE