CVE-2026-53581 | OPNsense prior 26.1.9/26.4_20 NTP Configuration /opnsense/core GPS/PPS serial port path traversal

A vulnerability was found in OPNsense. It has been classified as very critical. Impacted is an unknown function of the file /opnsense/core of the component NTP Configuration Module. This manipulation of the argument GPS/PPS serial port causes path traversal.

This vulnerability is tracked as CVE-2026-53581. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More