https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T18:59:45.332003+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-119560 CVE-2026-119560 — OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields 2026-11-05T18:59:45.333331+00:00

Affected: opnsense core

OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append ntpd.conf directives by embedding newlines in the fudge and refid fields. Attackers holding the page-services-ntp-gps or PPS privilege can submit CR/LF characters via services_ntpd_gps.php or services_ntpd_pps.php to inject directives loaded by ntpd running as root.