Login Request a demo
CO
Product
core
by opnsense · last CVE Oct 15, 2026
17
CVEs
0
On KEV
9.9
Max CVSS
10
New 30D
Vulnerabilities17In the news4Timeline
Severity mix
Critical 5High 6Medium 6Low 0
Severity
All severities17Critical5High6Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57155
9.9
1%
Oct 15
OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
Affected: < 26.1.11
CVE-2026-45158
9.1
1%
May 13
OPNsense: Command Injection via Attacker-Controlled DHCP Config
Affected: < 26.1.8
CVE-2026-44194
9.1
6%
May 13
OPNsense: RCE on user managment
Affected: < 26.1.8
CVE-2026-44193
9.1
1%
May 13
OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
Affected: < 26.1.7
CVE-2026-53581
9.0
0%
Sep 8
ntp: write path traversal
Affected: < 26.1.9; < 26.4_20
CVE-2026-34578
8.2
0%
Apr 9
OPNsense has an LDAP Injection via Unsanitized Username in Authentication
Affected: < 26.1.6
CVE-2026-63442
8.1
0%
Oct 15
OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
Affected: < 26.1.11
CVE-2026-30868
8.1
0%
Mar 11
Cross-Site Request Forgery (CSRF) in opnsense/core
Affected: < 26.1.4
CVE-2026-58390
8.0
1%
Oct 15
OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
Affected: < 26.1.11
CVE-2026-71490
7.1
0%
Oct 15
OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
Affected: < 26.1.11
CVE-2026-53582
7.1
1%
Oct 15
OPNsense: XPATH Injection can disclose any secret in config.xml
Affected: < 26.1.10
CVE-2026-44195
6.5
0%
May 13
OPNsense: Authentication lockout bypass
Affected: < 26.1.7
CVE-2026-58393
5.9
0%
Oct 15
OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
Affected: < 26.1.11
CVE-2026-58392
5.4
0%
Oct 15
OPNsense: Stored XSS in Services: NTP GPS
Affected: < 26.1.11
CVE-2026-58391
5.4
0%
Oct 15
OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
Affected: < 26.1.11
CVE-2026-58394
5.2
0%
Oct 15
OPNsense: Stored XSS in Administration Settings via Certificate Description
Affected: < 26.1.11
CVE-2026-58395
4.3
0%
Oct 15
OPNsense: XPath injection in MVC safe-delete
Affected: < 26.1.11
Showing 17