Login Request a demo
CO
Product
core
by opnsense · last CVE Oct 15, 2026
17
CVEs
0
On KEV
9.9
Max CVSS
10
New 30D
Vulnerabilities17In the news4Timeline
Severity mix
Critical 5High 6Medium 6Low 0
Severity
All severities17Critical5High6Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44195
6.5
0%
May 13
OPNsense: Authentication lockout bypass
Affected: < 26.1.7
CVE-2026-58393
5.9
0%
Oct 15
OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
Affected: < 26.1.11
CVE-2026-58392
5.4
0%
Oct 15
OPNsense: Stored XSS in Services: NTP GPS
Affected: < 26.1.11
CVE-2026-58391
5.4
0%
Oct 15
OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
Affected: < 26.1.11
CVE-2026-58394
5.2
0%
Oct 15
OPNsense: Stored XSS in Administration Settings via Certificate Description
Affected: < 26.1.11
CVE-2026-58395
4.3
0%
Oct 15
OPNsense: XPath injection in MVC safe-delete
Affected: < 26.1.11
Showing 6