CVE-2019-25371 | OPNsense 19.1 POST Request diag_ping.php host cross site scripting (Exploit 46351 / EDB-46351)

February 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in OPNsense 19.1. This issue affects some unknown processing of the file diag_ping.php of the component POST Request Handler. Such manipulation of the argument host leads to cross site scripting.

This vulnerability is referenced as CVE-2019-25371. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More