CVE-2026-49132— OPNsense < 26.1.9 Stored XSS via Certificate Description Field
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Deciso B.V. | OPNsense | < 26.1.9 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-49132
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OPNsense < 26.1.9 Stored XSS via Certificate Description Field
Source: CVE Program / CVE List V5
Vulnerability Description
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary HTML or JavaScript by embedding payloads in the certificate description field via the trust certificate API. The unsanitized description value is persisted and later rendered in the Dashboard Certificates widget through Certificates.js, which interpolates the raw value into HTML attribute and text content sinks without encoding, causing injected scripts to execute in the browser of any authenticated user who views the Dashboard, enabling session hijacking or credential theft.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
OPNsense 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OPNsense是OPNsense组织的一款网络防火墙与路由器操作系统。 OPNsense 26.1.9之前版本存在跨站脚本漏洞，该漏洞源于对通过信任证书API提交的证书描述字段未进行充分清理，攻击者可嵌入任意HTML或JavaScript，导致存储型跨站脚本攻击，脚本在查看仪表板的认证用户浏览器中执行，可能导致会话劫持或凭据窃取。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Deciso B.V. | OPNsense | 0 ~ 26.1.9 | - |
II. Public POCs for CVE-2026-49132
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-49132
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-49132 (1)
Vendor Advisories for CVE-2026-49132 (1)
IV. Related Vulnerabilities
Same product: OPNsense
- CVE-2026-49131
OPNsense < 26.1.9 Stored XSS via Firewall Rule Description F - CVE-2026-2035
Deciso OPNsense diag_backup.php filename Command Injection R - CVE-2019-25377
OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php - CVE-2019-25375
OPNsense 19.1 Reflected XSS via monit interface - CVE-2019-25376
OPNsense 19.1 Reflected XSS via proxy endpoint
Same weakness: CWE-79
- CVE-2026-19904
SourceCodester Online Book Store System System Settings inde - CVE-2026-16145
Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated Store - CVE-2026-13360
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subs - CVE-2026-15948
Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross- - CVE-2026-17090
Beaver Builder Page Builder <= 2.10.2.2 - Authenticated (Aut
V. Comments for CVE-2026-49132
No comments yet