CVE-2026-44193

⛔ critical

Summary

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. This vulnerability is fixed in 26.1.7.

CVSS Score

9.1

Critical

EPSS Score

0.3

Exploit Probability

Published Date

2026-05-13

First Seen: 2026-05-17

📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 87.7% of all 327,035 vulnerabilities in our database.

#40,172

Top 25% most severe

Severity Percentile

🎯 CISA SSVC Assessment Updated: May 15, 2026

🔍 Exploitation Status

Poc

Proof-of-concept available

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Total

Complete system compromise possible

SSVC data provided by CISA

Last Modified 2026-05-15

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE IDs (Weakness Types)

CWE-88

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
opnsense	opnsense	Affected	< 26.1.7

🔗 References 1

https://github.com/opnsense/core/security/advisories...

Exploit Vendor Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-44194	⛔ critical	9.1	0.1	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE)...	2026-05-13
CVE-2026-44195	🔶 medium	5.3	0.1	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler...	2026-05-13
CVE-2026-45158	⛔ critical	9.1	0.2	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP...	2026-05-13
CVE-2026-34578	⚠️ high	8.2	0.3	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector pas...	2026-04-09
CVE-2026-30868	🔶 medium	6.3	0.0	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform ...	2026-03-11
CVE-2019-25368	🔶 medium	5.4	0.0	OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint that allow attacker...	2026-02-15

These CVEs affect the same products