CVE-2026-123025 | OPNsense os-acme-client Plugin up to 4.17.0 Google Cloud DNS Validation DnsGcloud::prepare os command injection

November 5, 2026 Yanac

A vulnerability, which was classified as very critical, was found in OPNsense os-acme-client Plugin up to 4.17.0. Affected by this vulnerability is the function DnsGcloud::prepare of the component Google Cloud DNS Validation Module. Executing a manipulation can lead to os command injection.

This vulnerability appears as CVE-2026-123025. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More