CVE Feed

    Dashboard / CVE / CVE-2026-71490

    CVE-2026-71490

    OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a directly assigned comma-separated <priv> value as one string and then uses an exact comparison when checking user-config-readonly. A user directly assigned both a component write privilege and user-config-readonly can therefore be treated as lacking the read-only restriction, and MVC APIs protected by throwReadOnly() can persist configuration changes for that component. Group privileges are not affected by the same parser flaw because the group path already splits comma-separated values. This issue is fixed in version 26.1.11.

    Published:Oct 15, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 15, 2026
    EPSS Score:0.0038
    CVSS Score:7.1

    Affected Products

    Vendor
    Opnsense
    Product
    Core

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-57154 (CVSS 8.1) — OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, authenticated Web UI…
    CVE-2026-119560 (CVSS 6) — OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users …
    CVE-2026-119425 (CVSS 5.3) — OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roam…
    CVE-2026-119424 (CVSS 6.1) — OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated us…
    CVE-2026-119423 (CVSS 6.9) — OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to pl…
    CVE-2026-119409 (CVSS 8.6) — OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the Sys…
    CVE-2026-63442 (CVSS 8.1) — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGU…
    CVE-2026-58390 (CVSS 8) — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-st…
    CVE-2026-58394 (CVSS 5.2) — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_a…
    CVE-2026-58392 (CVSS 5.4) — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores t…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High