CVE-2026-115425
Multiple cross-site scripting (XSS) in OPNsense
Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link.
CVSS 4.0 · 5.6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products