{"id":"CVE-2026-115425","published":"2026-10-26T09:16:34.620","lastModified":"2026-10-26T15:16:38.770","description":"Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://digitalcanion.com/security-research/#ghsa-9h93-hhcx-957c","tags":[]},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-9h93-hhcx-957c","tags":[]}],"exploitRefs":[{"url":"https://github.com/opnsense/core/security/advisories/GHSA-9h93-hhcx-957c","tags":[]}],"hasPoc":true,"ai":null}