2370297 matches found
CVE-2026-58390 OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client commonname into data-common-name attributes without quote-safe encodin...
MINI-JMW5-3CR7-CP7V
Bulletin has no description...
MINI-5JR4-7RGQ-4GVP
Bulletin has no description...
MINI-Q258-HGVP-2VGM
Bulletin has no description...
MINI-9Q34-M7P4-MR67
Bulletin has no description...
CVE-2026-58394 OPNsense: Stored XSS in Administration Settings via Certificate Description
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/systemadvancedadmin.php reads certificate records into $acert but omits that array from legacyhtmlescapeformdata before rendering each certificate descr value in the SSL Certificate selector. The...
MINI-M433-H6JG-G4CG
Bulletin has no description...
MINI-VVCJ-R2QH-72JP
Bulletin has no description...
MINI-W666-XW77-GFJ8
Bulletin has no description...
MINI-X626-PV79-2PM8
Bulletin has no description...
MINI-46FV-JPH8-RGVC
Bulletin has no description...
MINI-PRMJ-JV5H-GP9J
Bulletin has no description...
CLSA-2026-1792077565 TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.8-tuxcare.5...
MINI-4M5X-X368-F9P2
Bulletin has no description...
MINI-CXMH-R32V-MVV2
Bulletin has no description...
CVE-2026-109449 Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...
CVE-2026-58392 OPNsense: Stored XSS in Services: NTP GPS
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacyhtmlescapeformdata to the encoded string, and then uses base64decode to decode the value directly into the GPS...
MINI-H44M-CHQ7-7V86
Bulletin has no description...
MINI-PJ3V-27J3-XVMM
Bulletin has no description...
MINI-QF9F-9XWW-57RV
Bulletin has no description...
MINI-2QQH-987X-FG9M
Bulletin has no description...
CVE-2026-58395 OPNsense: XPath injection in MVC safe-delete
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase interpolates an unvalidated safe-delete token from the request URL into an XPath expression over config.xml before confirming that the...
CVE-2026-58393 OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override commonname field accepts path traversal sequences and openvpncscconfwrite concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...
CLSA-2026-1792077256 TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.3.9-tuxcare.2...
CLSA-2026-1792077209 TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.7-tuxcare.7...
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...
MINI-98PM-4QW7-XGCV
Bulletin has no description...
MINI-F6HH-9FQ8-9QVV
Bulletin has no description...
CLSA-2026-1792077163 TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.2-tuxcare.8...
CVE-2026-58391 OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filterrule.volt and natrule.volt without quote-safe encoding. The response layer uses ENTNOQUOTES, so ...
MINI-CQ69-49W4-P827
Bulletin has no description...
MINI-GWHX-JQV3-G54Q
Bulletin has no description...
MINI-MGVW-4V65-WFHF
Bulletin has no description...
MINI-WW2R-M86H-32X9
Bulletin has no description...
CLSA-2026-1792077066 TuxCare security update for org.springframework.security (8 CVEs)
TuxCare rebuilt 18 org.springframework.security packages to address 8 CVEs. Fixed in 6.0.8-tuxcare.4...
CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php an...
MINI-6J4M-MMRM-VRW3
Bulletin has no description...
MINI-RQ74-W422-53HQ
Bulletin has no description...
MINI-4MM2-P93M-QFP9
Bulletin has no description...
MINI-X63P-7WXF-P89W
Bulletin has no description...
MINI-8552-P8M7-X263
Bulletin has no description...
MINI-JPQW-RX38-HV6P
Bulletin has no description...
MINI-XW4P-F5MX-23MG
Bulletin has no description...
MINI-575V-54H3-2VX3
Bulletin has no description...
MINI-4GFR-98V6-M5JH
Bulletin has no description...
MINI-C9V3-8QQJ-Q6JP
Bulletin has no description...
MINI-MVH2-JFX4-G322
Bulletin has no description...
MINI-MQHH-9HFX-7JQC
Bulletin has no description...