Threats tagged 'ghsa-r639-jmpp-wf8p'

OPNsense core versions before 26.7.8 have a configuration line injection vulnerability. Authenticated users with wireless-edit privileges can inject arbitrary directives by embedding carriage return and line feed characters in WPA fields such as wpa.identity, wpa.passphrase, or RADIUS shared secrets. This allows attackers to append unauthorized wpa_supplicant or hostapd directives that are loaded by root-run daemons.