CVE-2019-25374 | OPNsense 19.1 vpn_ipsec_settings.php passthrough_networks cross site scripting (Exploit 46351 / EDB-46351)

February 15, 2026 Yanac

A vulnerability labeled as problematic has been found in OPNsense 19.1. The affected element is an unknown function of the file vpn_ipsec_settings.php. Executing a manipulation of the argument passthrough_networks can lead to cross site scripting.

This vulnerability is tracked as CVE-2019-25374. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More