PT-2026-40827 · Opnsense · Opnsense

Published 2026-05-13 · Updated 2026-05-23 · CVE-2026-44194

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OPNsense versions prior to 26.1.8

Description An authenticated Remote Code Execution issue in the core of this FreeBSD-based firewall and routing platform allows a user with user-management privileges to execute arbitrary system commands as root. The flaw is located in the local user synchronization flow within the file core/src/opnsense/scripts/auth/sync user.php. An attacker can bypass input validation by formatting a malicious payload as a compliant email address, enabling shell commands to reach the underlying operating system.

Recommendations Update to version 26.1.8.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-44194

Affected Products

Opnsense

References · 8

• 🔥 https://github.com/opnsense/core/security/advisories/GHSA-f59w-m967-9rf6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44194 · Security Note
• https://twitter.com/VulmonFeeds/status/2054821909083131952 · Twitter Post
• https://t.me/CVEtracker/53709 · Telegram Post
• https://twitter.com/the_yellow_fall/status/2054729155116499333 · Twitter Post
• https://t.me/netlas/567 · Telegram Post
• https://twitter.com/Netlas_io/status/2055220392105816250 · Twitter Post
• https://twitter.com/integ_sec/status/2058159781613850827 · Twitter Post