{"vulnerability": "CVE-2026-57155", "sightings": [{"uuid": "806315ba-6dcd-441f-8a1e-f77fb086ba11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mpm5rz56h52r", "content": "5 vulnerabilities in OPNsense including full RCE. Covers CVE-2026-57155 and four more issues.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fhackerask.com%2Fposts%2Fopnsense%2F&t=Chasing%20the%20OPNsense%20RCE%3A%20The%20Story%20Behind%20My%20First%20CVEs", "creation_timestamp": "2026-07-01T18:34:11.007575Z"}, {"uuid": "2cab9090-66c2-4f93-a4b4-8d898b5b87bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/13007", "content": "CVE-2026-57155 \u2013 kitploit.com\n\nSat, 22 Aug 2026 14:07:43", "creation_timestamp": "2026-08-22T09:00:03.135898Z"}, {"uuid": "b6008cad-fddb-443d-a350-23ad27e0f32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/24204", "content": "CVE-2026-57155 \u2013 kitploit.com\n\nSat, 22 Aug 2026 14:07:43", "creation_timestamp": "2026-08-22T09:00:03.278367Z"}, {"uuid": "5fdc6027-4b07-4046-9acf-40697e115435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mq2h7kpxrk2h", "content": "CVE-2026-57155 (CVSS 9.9): OPNsense GeoIP alias bug lets a low-priv user hit root RCE via path traversal. 5th critical OPNsense CVE since May. Patch to 26.1.11 now.\u00a0\n\n\ud83c\uddec\ud83c\udde7 zurl.co/NbWxp\u00a0\n\ud83c\udde9\ud83c\uddea zurl.co/CFIqE \n\n#CyberSecurity #OPNsense #CVE", "creation_timestamp": "2026-07-07T11:00:05.341608Z"}, {"uuid": "5ac64b2d-5a3b-4c85-abe1-671afebfe35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7p7dzj4i2d", "content": "OPNsense root RCE flaws are public with PoC code. CVE-2026-57155 (9.9) chains an arbitrary file write to root. Patch 26.1.11 or 26.4.1p1 now.\n\n#OPNsense #RootRCE #RCE #FirewallSecurity #CyberSecurity #Vulnerability #InfoSec #PoC", "creation_timestamp": "2026-07-09T13:06:27.015860Z"}, {"uuid": "3f235250-9f7b-4b51-acd3-e06c068fc04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93631", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57155\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a babyshen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 02:32:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPNsense Root RCE (CVE-2026-57155)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:05.094837Z"}, {"uuid": "6979283a-ebe2-4467-8387-a65cc9eea22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "seen", "source": "Telegram/lkTqxrRLFzmZiKWrqHB7ywSYEM6i5xRhtt_z45dAnhSWBug", "content": "", "creation_timestamp": "2026-07-16T19:00:04.261725Z"}, {"uuid": "30cd91b4-b4d1-4212-9456-d7e3b1727e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "published-proof-of-concept", "source": "Telegram/lkTqxrRLFzmZiKWrqHB7ywSYEM6i5xRhtt_z45dAnhSWBug", "content": "", "creation_timestamp": "2026-07-17T00:00:26.472054Z"}, {"uuid": "abfceaac-d110-4527-8eaf-d2457191c460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93631", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57155\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a babyshen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 02:32:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPNsense Root RCE (CVE-2026-57155)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T01:00:34.566385Z"}, {"uuid": "8dc20dfe-46f1-4415-a14f-7ffe91b24f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/24204", "content": "CVE-2026-57155 \u2013 kitploit.com\n\nSat, 22 Aug 2026 14:07:43", "creation_timestamp": "2026-08-23T00:00:40.971335Z"}, {"uuid": "55e880a8-66aa-4f6e-8a21-ff8c9d30b883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57155", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/13007", "content": "CVE-2026-57155 \u2013 kitploit.com\n\nSat, 22 Aug 2026 14:07:43", "creation_timestamp": "2026-08-23T00:00:40.682130Z"}]}