CVE-2026-119409 - OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
CVE ID :CVE-2026-119409 Published : Oct. 30, 2026, 12:16 p.m. | 1 hour, 44 minutes ago Description :OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware...