CVE-2026-115425

UNKNOWN 0.0

Multiple cross-site scripting (XSS) in OPNsense

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link.

Vendor	opnsense
Product	opnsense firewall
Published	Oct 26, 2026

Stay Ahead of the Next One

Get instant alerts for opnsense opnsense firewall

Be the first to know when new unknown vulnerabilities affecting opnsense opnsense firewall are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

OPNsense / OPNsense firewall

0 ≤ 26.7.1_1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

digitalcanion.com: https://digitalcanion.com/security-research/#ghsa-9h93-hhcx-957c github.com: https://github.com/opnsense/core/security/advisories/GHSA-9h93-hhcx-957c

Credits

Brian Mariani - DigitalCanion SA