OPNsense readline Bypass

The vulnerability of the readline function in the usernamefld web interface of the OPNsense operating system is related to incorrect processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...

CVE-2026-63442

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters that survive LOGAUTH processing through syslog-ng-lockout.conf into the syslog-ng program destination feeding...

CVE-2026-63442: Improper Output Neutralization for Logs

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters that survive LOGAUTH processing through syslog-ng-lockout.conf into the syslog-ng program destination feeding...

PT-2026-115000

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters that survive LOG AUTH processing through syslog-ng-lockout.conf into the syslog-ng program destination feeding lockout...

PT-2026-120365

Уязвимость функции readline веб-интерфейса usernamefld операционной системы OPNsense связана с неправильной обработкой выходных данных для журналов регистрации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...