CVE-2026-123025

An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare method decodes the dnsgcloudkey model field and directly interpolates the string fields gcloudaccount and gcloudproject into a...