CVE-2026-63442 - OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
CVE ID :CVE-2026-63442 Published : Oct. 15, 2026, 4:18 p.m. | 1 hour, 15 minutes ago Description :OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters that survive...