CVE-2026-119424

OPNsense core versions before 26.7.8 are vulnerable to a configuration line injection vulnerability. This issue allows authenticated users possessing wireless-edit privileges to inject arbitrary directives into configuration files by embedding CR/LF characters within WPA fields, such as wpa.ident...