VULNERABILITY INTELLIGENCE

CVE-2026-115425

CVSS score5.6 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2026-10-26

Last modified2026-10-26

Description

Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link.