PT-2026-56190 · Undefined · Undefined
Published
2026-07-07
·
Updated
2026-07-07
·
CVE-2026-53582
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A stored XPATH injection vulnerability exists in opnsense's trust module.
Any user if given just System:
CA Manager permissions can use a bool side channel/oracle to slowly leak any secret in config.xml character by character. the injection point is in the refid field of a ca object.
Write-up for CVE-2026-53582:
https://t.co/vvNVwBYTNx
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined