CWE-643 (CWE-643) — 3 disclosed vulnerabilities

Records the NVD classes under CWE-643, highest CVSS first.

HIGH 7.1CVE-2026-53582public PoC2026-10-15
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNs…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-58395public PoC2026-10-15
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase() interpolates an unvalidated safe-delete token from the request URL into an XPath expression over …
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-934342026-10-27
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.
AI risk analysis on Exploit-DB.ai →