All vulnerabilities

Servers and applications

GHSA-p683-f7x2-pm4p

Authenticated Root Command Injection via Firmware Mirror Configuration in OPNsense

Severity
High 7.2
Published
28 Oct 2026
Last changed
28 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
26.7.8
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
OPNsenseServers and applications · github:opnsense/core
  • Every version before 26.7.8

References