OPNsense os-acme-client

• CVE-2026-123025 Critical 9.4 An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gclou 0.6%