CVE ID :CVE-2026-57155 Published : Oct. 15, 2026, 3:13 p.m. | 20 minutes ago Description :OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-57155 - OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

VERWANDTEARTIKEL

CVE-2026-85634 - Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name

CVE-2026-77466 - Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

CVE-2026-77470 - Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request

CVE-2026-61838 - Lychee: Album password bypass in ZIP downloads

CVE-2026-62679 - Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read

CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune