https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 14:18:24 +0000 https://db.gcve.eu/vuln/cve-2026-119423 <p><strong>Affected:</strong> opnsense core</p> <p>OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockout_handler by submitting crafted WebGUI login usernames. Attackers can submit usernames like &#39;Invalid user &lt;victim-ip&gt;&#39; repeatedly to add the victim to the sshlockout table, blocking SSH and WebGUI access and killing its pf states.</p> <p><strong>Affected:</strong> opnsense core</p> <p>OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockout_handler by submitting crafted WebGUI login usernames. Attackers can submit usernames like &#39;Invalid user &lt;victim-ip&gt;&#39; repeatedly to add the victim to the sshlockout table, blocking SSH and WebGUI access and killing its pf states.</p> https://db.gcve.eu/vuln/cve-2026-119423