exploit-CVE-2026-2670

exploit-CVE-2026-2670 CVE-2026-2670 – Advantech WISE-6610 Command Injection PoC Proof-of-concept exploit demonstrating a command injection vulnerability in the Advantech WISE-6610 industrial cellular router. The vulnerability exists in the /cgi-bin/luci/admin/openvpnapply endpoint and allows an...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

zeek-openvpn

zeek::openvpn THIS IS DEPRECATED IN FAVOR OF https://github.com/corelight/zeek-spicy-openvpn A plugin to detect and parse OpenVPN in the following modes: UDP w/ TLS UDP w/ TLS & TLS Auth TCP w/ TLS TCP w/ TLS & TLS Auth So far this will not detect shared key mode for UDP or TCP. If this protocol...

pfsense-openvpn-wizard-crlf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-openvpn-wizard-crlf pfsense-openvpn-wizard-crlf Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org OpenVPN wizard copies Default Domain / NetBIOS scope into dnsdomain / netbiosscope wi...

CVE-2026-98604

A flaw was found in the Linux kernel's OpenVPN ovpn subsystem. A race condition exists where local network endpoint updates modify binding data without proper synchronization while outbound network traffic reads the address concurrently. A remote peer or concurrent network activity could trigger...

CVE-2026-98603

A flaw was found in the Linux kernel's OpenVPN ovpn module. A local user can cause a Denial of Service DoS or network disruption during concurrent network traffic when an outdated local source address is cleared. Because the address is modified in place without proper synchronization, concurrent...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

Security update for openvpn (important)

openSUSE security update: security update for openvpn ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22072-1 Rating: important References: bsc1267944 bsc1267945 bsc1273126 bsc1273127 bsc1273128 bsc1273129 bsc1273130 bsc1275310 bsc1279613...

SUSE CVE-2026-84471

The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

CVE-2026-111224

pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connectasync.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes an...

CVE-2026-111224 Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh

pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connectasync.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes an...

CVE-2026-84790

A flaw was found in OpenVPN. This vulnerability allows a remote authenticated attacker to impersonate other users by submitting a specially crafted certificate subject field during authentication. By assuming the identity of a different user, an attacker can gain unauthorized access to restricted...

CVE-2026-84471

A flaw was found in OpenVPN due to an incomplete fix for a previously identified use-after-free memory vulnerability. A remote authenticated peer can exploit this issue by sending specially crafted network packets during Transport Layer Security TLS session promotion or expiration. Successful...

CVE-2026-58393

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override commonname field accepts path traversal sequences and openvpncscconfwrite concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...

CVE-2026-58390

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client commonname into data-common-name attributes without quote-safe encodin...

CVE-2026-58390

Prior to version 26.1.11 , OPNsense is vulnerable to a Stored XSS leading to root RCE . The flaw exists in the OpenVPN connection-status dashboard widget (specifically src/opnsense/www/js/widgets/OpenVPNClients.js) and the connection-status view , where the common_name of an OpenVPN client is ins...

CVE-2026-58390 OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client commonname into data-common-name attributes without quote-safe encodin...

CVE-2026-58390 OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client commonname into data-common-name attributes without quote-safe encodin...

CVE-2026-58393 OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override commonname field accepts path traversal sequences and openvpncscconfwrite concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...

EUVD-2026-102115

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override commonname field accepts path traversal sequences and openvpncscconfwrite concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...