CVE-2026-45158

⛔ critical

Summary

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell script, allowing remote code execution as root on the underlying operating system. This vulnerability is fixed in 26.1.8.

CVSS Score

9.1

Critical

EPSS Score

0.2

Exploit Probability

Published Date

2026-05-13

First Seen: 2026-05-17

📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 87.7% of all 328,009 vulnerabilities in our database.

#40,307

Top 25% most severe

Severity Percentile

🎯 CISA SSVC Assessment Updated: May 14, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Total

Complete system compromise possible

SSVC data provided by CISA

Last Modified 2026-05-15

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE IDs (Weakness Types)

CWE-88

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
opnsense	opnsense	Affected	< 26.1.8

🔗 References 1

https://github.com/opnsense/core/security/advisories...

Vendor Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-44193	⛔ critical	9.1	0.3	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_se...	2026-05-13
CVE-2026-44194	⛔ critical	9.1	0.1	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE)...	2026-05-13
CVE-2026-44195	🔶 medium	5.3	0.1	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler...	2026-05-13
CVE-2026-34578	⚠️ high	8.2	0.3	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector pas...	2026-04-09
CVE-2026-30868	🔶 medium	6.3	0.0	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform ...	2026-03-11
CVE-2019-25368	🔶 medium	5.4	0.0	OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint that allow attacker...	2026-02-15

These CVEs affect the same products