Login Request a demo
OP
Product
OPNsense
by Opnsense · last CVE May 13, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities36In the news0Timeline
Severity mix
Critical 9High 6Medium 21Low 0
Severity
All severities36Critical9High6Medium21Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OPNsense to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34578
8.2
0%
Apr 9
OPNsense has an LDAP Injection via Unsanitized Username in Authentication
Affected: before 26.1.6
CVE-2026-30868
8.1
0%
Mar 11
Cross-Site Request Forgery (CSRF) in opnsense/core
Affected: before 26.1.4
CVE-2023-39005
7.5
1%
Aug 9
Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2
Affected: before 23.7
CVE-2023-39003
7.5
1%
Aug 9
OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in the directory /tmp
Affected: before 23.7
CVE-2023-38997
7.2
1%
Aug 9
A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute…
Affected: before 23.7
CVE-2019-11816
7.2
3%
May 20
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via…
Affected: before 19.1.8
Showing 6