CVE-2026-34578

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector passes the login username directly into an LDAP search filter without calling ldap_escape(). An unauthenticated attacker can inject LDAP filter metacharacters into the username field of the WebGUI login page to enumerate valid LDAP usernames in the configured directory. When the LDAP server configuration includes an Extended Query to restrict login to members of a specific group, the same injection can be used to bypass that group membership restriction and authenticate as any LDAP user whose password is known, regardless of group membership. This vulnerability is fixed in 26.1.6.

• CWE-90

• https://github.com/opnsense/core/commit/016f66cb4620cd48183fa97843f343bb71813c6ePatch
• https://github.com/opnsense/core/security/advisories/GHSA-jpm7-f59c-mp54Exploit, Mitigation, Vendor Advisory
• https://github.com/opnsense/core/security/advisories/GHSA-jpm7-f59c-mp54Exploit, Mitigation, Vendor Advisory

Published

Apr 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34571CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a …9
• CVE-2026-34572CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a …8.8
• CVE-2026-34573Parse Server is an open source backend that can be deployed …7.5
• CVE-2026-34574Parse Server is an open source backend that can be deployed …5.4
• CVE-2026-34576Postiz is an AI social media scheduling tool. Prior to versi…7.7
• CVE-2026-34577Postiz is an AI social media scheduling tool. Prior to versi…8.6
• CVE-2026-34579Mantis Bug Tracker (MantisBT) is an open source issue tracke…5.3
• CVE-2026-34580Botan is a C++ cryptography library. In 3.11.0, the function…7.5
• CVE-2026-34581goshs is a SimpleHTTPServer written in Go. From version 1.1.…8.1
• CVE-2026-34582Botan is a C++ cryptography library. Prior to version 3.11.1…9.1
• CVE-2026-34584listmonk is a standalone, self-hosted, newsletter and mailin…5.4
• CVE-2026-34585SiYuan is a personal knowledge management system. Prior to v…8.2