CO
Product
core
17
CVEs
0
On KEV
9.9
Max CVSS
10
New 30D
Severity mix
Critical 5High 6Medium 6Low 0
Watch
Add core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57155 | 9.9 | Oct 15 | OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer Affected: < 26.1.11 |
| CVE-2026-45158 | 9.1 | May 13 | OPNsense: Command Injection via Attacker-Controlled DHCP Config Affected: < 26.1.8 |
| CVE-2026-44194 | 9.1 | May 13 | OPNsense: RCE on user managment Affected: < 26.1.8 |
| CVE-2026-44193 | 9.1 | May 13 | OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method Affected: < 26.1.7 |
| CVE-2026-53581 | 9.0 | Sep 8 | ntp: write path traversal Affected: < 26.1.9; < 26.4_20 |
Showing 5