Skip to content
Threat Feed
Subscribe

Tag

Opnsense

3 briefs RSS
high advisory

OPNMGR: Unauthenticated path traversal (CVE-2026-103978)

OPNMGR versions prior to 3.10.0 are vulnerable to an unauthenticated path traversal attack in the snyk_scan_progress.php file, allowing remote attackers to read sensitive .json files on the server.

OPNMGR web-application-vulnerability path-traversal php opnsense
1r 2t 1c
critical advisory

OPNsense Multiple Vulnerabilities Lead to Remote Code Execution

A remote, authenticated attacker can exploit multiple vulnerabilities in OPNsense to execute arbitrary code with administrator privileges.

OPNsense rce privilege-escalation execution
2r 2t
high advisory

OPNsense LDAP Injection Vulnerability (CVE-2026-34578)

OPNsense versions prior to 26.1.6 are vulnerable to LDAP injection, allowing unauthenticated attackers to enumerate valid LDAP usernames and bypass group membership restrictions via the WebGUI login page.

ldap-injection vulnerability opnsense
2r 1t 1c