CVE-2026-53581Disclosure

LOWCVSS 9.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulating the GPS or PPS serial port parameter, an attacker with access to the NTP configuration can escape the intended directory and force the system to write user-controlled data to any file on the filesystem. Version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core patch the issue.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22CWE-73

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-09-09); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-09	2	Disclosure2
2026-09-12	1	General1

Full discourse3 posts

Rıdvan Yağlı@ridvanyagli46d
Disclosure
🔴 OPNsense'te kritik güvenlik açığı: CVE-2026-53581 (CVSS 9.0) NTP yapılandırmasındaki Path Traversal açığı, yetkili bir saldırganın GPS/PPS serial port parametresini manipüle ederek sistemde root yetkisiyle keyfi dosyaların üzerine yazmasına neden olabiliyor. Açık, başarılı istismar halinde firewall'ın tamamen ele geçirilmesine kadar gidebilir. 26.1.9 ve 26.4_20 sürümlerinde yamalandı. Kaynak: https://github.com/opnsense/core/security/advisories/GHSA-872g-g543-j37m
Post summary
The post announces a critical Path Traversal vulnerability (CVE‑2026‑53581, CVSS 9.0) in OPNsense’s NTP configuration that allows a privileged attacker to overwrite files as root, potentially fully compromising the firewall; the issue is patched in versions 26.1.9 and 26.4_20.
01032674
2.4K followersView on X
DFIR Lab@DFIR_Lab44d
General
🚨 CRITICAL: CVE-2026-53581 (CVSS 9.0) OPNsense path traversal flaw allows root file overwrite via NTP config. Attackers can write to any filesystem location. Affected: opnsense/core <26.1.9, BE/opnsense/core <26.4_20 #CVE #PatchNow #ThreatIntel https://t.co/rJHAXshu4Z
Post summary
The tweet alerts to a critical path‑traversal vulnerability in OPNsense that permits root‑level file overwrite, but it provides no PoC, exploit code, active exploitation evidence, or patch information.
0000039
133 followersView on X
CERT-PY@CERTpy46d
Disclosure
⚠️ Vulnerabilidad en productos de OPNsense ❗ CVE-2026-53581 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-de-opnsense/ https://t.co/f9E1g0xBH4
Post summary
A tweet announcing a new vulnerability in OPNsense products (CVE‑2026‑53581) with a link to a website for additional details.
00000233
6.7K followersView on X

Explore more

Back to dashboard