{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/opnsense--26.7.8/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:opnsense:opnsense:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-119409"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OPNsense (\u003c 26.7.8)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","rce","network-security"],"_cs_type":"advisory","_cs_vendors":["OPNsense"],"content_html":"\u003cp\u003eA vulnerability in OPNsense allows a remote, authenticated attacker to achieve arbitrary code execution with administrator privileges. No CVE identifier is provided in the current BSI advisory. Users are advised to monitor the official OPNsense security announcements for patch availability and further technical details.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker to execute arbitrary code with administrative rights, potentially leading to full system compromise of the firewall appliance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all OPNsense instances within the environment. Monitor official OPNsense release channels for patches addressing this vulnerability and apply them immediately upon release. Audit administrative session logs for unauthorized access or suspicious command execution.\u003c/p\u003e\n","date_modified":"2026-10-30T13:29:11Z","date_published":"2026-10-29T12:14:17Z","id":"https://feed.craftedsignal.io/briefs/2026-10-opnsense-rce/","summary":"OPNsense contains a vulnerability that allows a remote, authenticated attacker to execute arbitrary code with administrator privileges.","title":"OPNsense: Remote authenticated arbitrary code execution","url":"https://feed.craftedsignal.io/briefs/2026-10-opnsense-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - OPNsense (\u003c 26.7.8)","version":"https://jsonfeed.org/version/1.1"}