CVE-2026-119424

6.8 MEDIUMpublic exploit available

Published 2026-10-30 · Updated 2026-10-30

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wireless-edit privilege to inject directives by embedding CR/LF characters in WPA fields. Attackers can place newlines in wpa.identity, wpa.passphrase, or RADIUS shared secrets to append arbitrary wpa_supplicant or hostapd directives loaded by root-run daemons.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses

CWE-93

Public exploit & PoC references

https://github.com/opnsense/core
https://github.com/opnsense/core/blob/26.7.7/src/etc/inc/interfaces.inc#L1901
https://github.com/opnsense/core/blob/26.7.7/src/opnsense/mvc/app/models/OPNsense/Interfaces/Wlan.xml#L185
https://github.com/opnsense/core/commit/3bbd714b4c4b60f164e2e908501f208d3eadf645
https://github.com/opnsense/core/commit/9f1eac0f9bdf705766ab61f9d62b9d55757fd0da

All references

https://abraxaslabs.tech/research/opnsense-wlan-wpa-line
https://github.com/opnsense/core
https://github.com/opnsense/core/blob/26.7.7/src/etc/inc/interfaces.inc#L1901
https://github.com/opnsense/core/blob/26.7.7/src/opnsense/mvc/app/models/OPNsense/Interfaces/Wlan.xml#L185
https://github.com/opnsense/core/commit/3bbd714b4c4b60f164e2e908501f208d3eadf645
https://github.com/opnsense/core/commit/9f1eac0f9bdf705766ab61f9d62b9d55757fd0da
https://www.vulncheck.com/advisories/opnsense-before-26.7.8-wireless-wpa-configuration-line-injection-via-identity

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2026-100717PoC
MEDIUMCVE-2026-102136PoC
MEDIUMCVE-2026-102145PoC
MEDIUMCVE-2026-102471PoC
UNSCOREDCVE-2026-102938PoC
MEDIUMCVE-2026-110835PoC
MEDIUMCVE-2026-111219PoC
HIGHCVE-2026-111220PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.