CVE-2019-25369 | OPNsense 19.1 POST Request system_advanced_sysctl.php tunable cross site scripting (Exploit 46351 / EDB-46351)

February 15, 2026 Yanac

A vulnerability was found in OPNsense 19.1. It has been declared as problematic. This affects an unknown part of the file system_advanced_sysctl.php of the component POST Request Handler. The manipulation of the argument tunable results in cross site scripting.

This vulnerability was named CVE-2019-25369. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More