OPNsense XPATH Injection (CVE-2026-53582)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-07 06:39 UTC
Importiert: 2026-07-23 03:15 UTC
Quelle-ID: full_disc
uid_hash: 060a7c8c7c046ce4dd494f4db0d82b6ab90efe54652b8fb68d70a266f58e74eb

Full Disclosure

Posted by evan on Jul 06 SUMMARY: a stored XPATH injection allows any user with just ca

manager/certificate manager perms to leak any secret key/any value in

config.xml, thus achieving privilege escalation and potentially remote

code execution. this can also likely be chained via csrf and some

clever hiding. see

== VULN ==

the primary vulnerable sink is here:

$refcount =...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-53582			HIGH	7.1			2026-10-15

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss