Five plugins were released today, each at 1.0.0, each in a repository of its own and each installable on its own: a hardware watchdog, a kernel follower, block lists, a port guard and a choice of crypto driver for IPsec.
On 2026-10-21 PHP published an emergency release fixing two critical flaws, CVE-2026-109618 and CVE-2026-109619 - "PHP2Shell". php.net says both can allow remote code execution without a login, and that updating is the only complete fix. OPNsense's web interface runs on PHP.
A sweep of the vendor's own sources, its board package and the coprocessor's own log, read on the second XGS 3300 and on the XGS 136, found 29 capabilities of this hardware that this project had not known about. They matter, so the completion figures now count them - lowered on purpose, the XGS 3300 from 97% to 89% and the XGS 136 from 96% to 91%.
The project has a domain of its own, npuforge.org, and this is its site: the documentation, the measurements and the story in one place, searchable, in light and dark, with a home page in English and in Arabic.
os-xgs-npu has a GitHub Sponsors page now: https://github.com/sponsors/AbdelmonemAwad