CWE-643 (CWE-643) — 4 disclosed vulnerabilities

Records the NVD classes under CWE-643, highest CVSS first.

HIGH 7.1CVE-2026-53582public PoC2026-10-15
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNs…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-114442public PoC2026-11-03
Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP collector XML parsing path. An authenticated user with permission to create monitor templates can supply XPath expressions through metrics.a…
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.3CVE-2026-58395public PoC2026-10-15
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase() interpolates an unvalidated safe-delete token from the request URL into an XPath expression over …
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-934342026-10-27
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.
AI risk analysis on Exploit-DB.ai →