CVE-2026-58395 | OPNsense up to 26.1.10 Safe-Delete config.xml delBase xpath injection

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in OPNsense up to 26.1.10. This affects the function ApiMutableModelControllerBase::delBase of the file config.xml of the component Safe-Delete. Performing a manipulation results in improper neutralization of data within xpath expressions.

This vulnerability is identified as CVE-2026-58395. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More