CVE-2026-58393 | OPNsense up to 26.1.10 OpenVPN Client Specific Override client_connect.php openvpn_csc_conf_write common_name path traversal

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in OPNsense up to 26.1.10. The impacted element is the function openvpn_csc_conf_write of the file client_connect.php of the component OpenVPN Client Specific Override. Such manipulation of the argument common_name leads to path traversal.

This vulnerability is referenced as CVE-2026-58393. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More