CVE-2019-25376 | OPNsense 19.1 Proxy Endpoint ignoreLogACL cross site scripting (Exploit 46351 / EDB-46351)

February 15, 2026 Yanac

A vulnerability classified as problematic has been found in OPNsense 19.1. Affected by this issue is some unknown functionality of the component Proxy Endpoint. Performing a manipulation of the argument ignoreLogACL results in cross site scripting.

This vulnerability is cataloged as CVE-2019-25376. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More