FRESH

Hacker News

Chasing the OPNsense RCE: The Story Behind My First CVEs

16 points by HackerAsk

by bill_mcgonigle

0 subcomment

For those wondering this gives full system compromise to an authenticated user with permissions to edit the firewall, AIUI.
Nasty but I was expecting a remote unauthenticated attack at 9.9. Hopefully you don't allow admin on WAN!
Thanks for finding the bugs and writing about the design pattern problem, HackerAsk.

0 subcomment

by pizzalife

0 subcomment

Why did you not mention LLM use in the post at all?
Are you not using LLMs as part of your toolkit in 2026?