Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2026-115425

Multiple cross-site scripting (XSS) in OPNsense

Description

Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OPNsense OPNsense firewall

Default version status: unaffected

  • 0 to ≤ 26.7.1_1affected
  • 26.7.7unaffected

References