CVE-2026-119409

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...

CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...

CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...

EUVD-2026-113793

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...

CVE-2026-119409

Versions of OPNsense before 26.7.8 are vulnerable to a root command injection vulnerability via the firmware mirror setting. An authenticated user with System: Firmware privileges can execute arbitrary commands as root by submitting shell metacharacters through the POST /api/core/firmware/set end...

PT-2026-133466

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...

opnsense-firmware-mirror-sed

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-firmware-mirror-sed Write-up: https://abraxaslabs.tech/research/opnsense-firmware-mirror-sed opnsense-firmware-mirror-sed Class: Signature skip Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org Syste...