Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication failure counter for their IP address. By interjecting a crafted username containing a success keyword ("Accepted" or "Successful login") between normal brute-force attempts, an attacker can prevent the failure counter from ever reaching the lockout threshold. This vulnerability is fixed in 26.1.7.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-44195 Unauthenticated Authentication Failure Counter Reset in OPNsense Prior to 26.1.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44195
Post summary
The text announces a new vulnerability in OPNsense, providing only a brief headline without details on exploit, patch, or active attacks.
CVE-2026-44195 OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continu… https://www.cve.org/CVERecord?id=CVE-2026-44195
Post summary
The text announces a logic flaw vulnerability in OPNsense that allows unauthenticated attackers to persist; it provides basic technical details but no exploit or patch discussion.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opnsense | opnsense | - | - | - |