https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:05:53.819971+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318501 EUVD-2026-318501 2026-10-04T12:05:53.855659+00:00 EUVD-2026-318501 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44195 fkie_cve-2026-44195 2026-10-04T12:05:53.855694+00:00

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication failure counter for their IP address. By interjecting a crafted username containing a success keyword ("Accepted" or "Successful login") between normal brute-force attempts, an attacker can prevent the failure counter from ever reaching the lockout threshold. This vulnerability is fixed in 26.1.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1344 WID-SEC-W-2026-1344 — OPNsense: Mehrere Schwachstellen 2026-10-04T12:05:53.855729+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OPNsense ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Code auszuführen.