OPNsense Forum

English Forums => Virtual private networks => Topic started by: wirehire on July 30, 2026, 06:11:04 PM

Title: wireguard freebsd wg(4) CVE-2026-58085
Post by: wirehire on July 30, 2026, 06:11:04 PM

a new cve for freebsd wireguard was found :

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc

Greets!
Title: Re: wireguard freebsd wg(4) CVE-2026-58085
Post by: paepcke on August 03, 2026, 08:10:04 AM


https://www.tenable.com/cve/CVE-2026-58085 (https://www.tenable.com/cve/CVE-2026-58085)



CVSS v3 : Base Score: 7.5 (HIGH)

Its a big one!

(Failure to check inbound data authentication!)

Quick hotfix & backports would be very welcome. Very small patch, very big impact. Expect AI assisted exploit flood in 3...2...1 ...