CVE ID :CVE-2026-58390 Published : Oct. 15, 2026, 4:18 p.m. | 1 hour, 15 minutes ago Description :OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-58390 - OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views

VERWANDTEARTIKEL

CVE-2026-85634 - Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name

CVE-2026-77466 - Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

CVE-2026-77470 - Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request

CVE-2026-61838 - Lychee: Album password bypass in ZIP downloads

CVE-2026-62679 - Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read

CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune