https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:59:51 +0000 https://cve.radiocsirt.org/vuln/cve-2026-44195 <p><strong>Affected:</strong> opnsense core</p> <p>OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication failure counter for their IP address. By interjecting a crafted username containing a success keyword (&#34;Accepted&#34; or &#34;Successful login&#34;) between normal brute-force attempts, an attacker can prevent the failure counter from ever reaching the lockout threshold. This vulnerability is fixed in 26.1.7.</p> <p><strong>Affected:</strong> opnsense core</p> <p>OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication failure counter for their IP address. By interjecting a crafted username containing a success keyword (&#34;Accepted&#34; or &#34;Successful login&#34;) between normal brute-force attempts, an attacker can prevent the failure counter from ever reaching the lockout threshold. This vulnerability is fixed in 26.1.7.</p> https://cve.radiocsirt.org/vuln/cve-2026-44195