CVE-2026-58394 | OPNsense up to 26.1.10 SSL Certificate Selector system_advanced_admin.php legacy_html_escape_form_data a_cert cross site scripting

October 15, 2026 Yanac

A vulnerability, which was classified as problematic, was found in OPNsense up to 26.1.10. This issue affects the function legacy_html_escape_form_data of the file src/www/system_advanced_admin.php of the component SSL Certificate Selector. Executing a manipulation of the argument a_cert can lead to cross site scripting.

This vulnerability appears as CVE-2026-58394. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More