Login Request a demo
OP
Vendor
Opnsense
3 products with CVEs on record
54
CVEs
0
On KEV
11
New 30D
Products
CO
core
opnsense
9.9
17 CVEs0 on KEV10 new
OF
OPNsense firewall
OPNsense
5.6
1 CVEs0 on KEV1 new
OP
OPNsense
Opnsense
9.8
36 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115425
New
OF
OPNsense firewall
OPNsense
5.6
0%
Oct 26Multiple cross-site scripting (XSS) in OPNsense
CVE-2026-71490
CO
core
opnsense
7.1
0%
Oct 15OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
CVE-2026-63442
CO
core
opnsense
8.1
0%
Oct 15OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
CVE-2026-58390
CO
core
opnsense
8.0
1%
Oct 15OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
CVE-2026-58394
CO
core
opnsense
5.2
0%
Oct 15OPNsense: Stored XSS in Administration Settings via Certificate Description
CVE-2026-58392
CO
core
opnsense
5.4
0%
Oct 15OPNsense: Stored XSS in Services: NTP GPS
CVE-2026-58395
CO
core
opnsense
4.3
0%
Oct 15OPNsense: XPath injection in MVC safe-delete
CVE-2026-58393
CO
core
opnsense
5.9
0%
Oct 15OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
CVE-2026-57155
CO
core
opnsense
9.9
1%
Oct 15OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
CVE-2026-58391
CO
core
opnsense
5.4
0%
Oct 15OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
CVE-2026-53582
CO
core
opnsense
7.1
1%
Oct 15OPNsense: XPATH Injection can disclose any secret in config.xml
CVE-2026-53581
CO
core
opnsense
9.0
0%
Sep 8ntp: write path traversal
CVE-2026-45158
CO
core
opnsense
9.1
1%
May 13OPNsense: Command Injection via Attacker-Controlled DHCP Config
CVE-2026-44194
CO
core
opnsense
9.1
6%
May 13OPNsense: RCE on user managment
CVE-2026-44195
CO
core
opnsense
6.5
0%
May 13OPNsense: Authentication lockout bypass
CVE-2026-44193
CO
core
opnsense
9.1
1%
May 13OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
CVE-2026-34578
CO
core
opnsense
8.2
0%
Apr 9OPNsense has an LDAP Injection via Unsanitized Username in Authentication
CVE-2026-30868
CO
core
opnsense
8.1
0%
Mar 11Cross-Site Request Forgery (CSRF) in opnsense/core
CVE-2019-25377
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php
CVE-2019-25376
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via proxy endpoint
CVE-2019-25375
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via monit interface
CVE-2019-25374
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php
CVE-2019-25373
OP
OPNsense
Opnsense
5.4
0%
Feb 15OPNsense 19.1 Stored XSS via firewall_rules_edit.php
CVE-2019-25372
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via diag_traceroute.php
CVE-2019-25371
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via diag_ping.php
CVE-2019-25370
OP
OPNsense
Opnsense
6.1
0%
Feb 15OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php
CVE-2019-25369
OP
OPNsense
Opnsense
5.4
0%
Feb 15OPNsense 19.1 Stored XSS via system_advanced_sysctl.php
CVE-2019-25368
OP
OPNsense
Opnsense
5.4
0%
Feb 15OPNsense 19.1 Reflected XSS via diag_backup.php
CVE-2025-50989
OP
OPNsense
OPNsense
9.1
11%
Aug 27OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php)
CVE-2023-27152
OP
Opnsense
Opnsense
9.8
1%
Oct 23DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentication
CVE-2023-44276
OP
Opnsense
Opnsense
5.4
1%
Sep 28OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard
CVE-2023-44275
OP
Opnsense
Opnsense
5.4
1%
Sep 28OPNsense before 23.7.5 allows XSS via the index.php column_count parameter to the Lobby Dashboard
CVE-2023-39008
OP
Opnsense
Opnsense
9.8
3%
Aug 9A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to…
CVE-2023-39007
OP
Opnsense
Opnsense
9.6
3%
Aug 9/ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows XSS via openAction in…
CVE-2023-39006
OP
Opnsense
Opnsense
5.4
0%
Aug 9The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization
CVE-2023-39005
OP
Opnsense
Opnsense
7.5
1%
Aug 9Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2
CVE-2023-39004
OP
Opnsense
Opnsense
9.8
1%
Aug 9Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive…
CVE-2023-39003
OP
Opnsense
Opnsense
7.5
1%
Aug 9OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in the directory /tmp
CVE-2023-39002
OP
Opnsense
Opnsense
6.1
1%
Aug 9A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows…
CVE-2023-39001
OP
Opnsense
Opnsense
9.8
4%
Aug 9A command injection vulnerability in the component diag_backup.php of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute…
CVE-2023-39000
OP
Opnsense
Opnsense
6.1
1%
Aug 9A reflected cross-site scripting (XSS) vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows…
CVE-2023-38999
OP
Opnsense
Opnsense
6.5
0%
Aug 9A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a…
CVE-2023-38998
OP
Opnsense
Opnsense
6.1
1%
Aug 9An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site…
CVE-2023-38997
OP
Opnsense
Opnsense
7.2
1%
Aug 9A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute…
CVE-2021-42770
OP
Opnsense
Opnsense
6.1
1%
Nov 8A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester
CVE-2020-23015
OP
Opnsense
Opnsense
6.1
3%
May 3An open redirect issue was discovered in OPNsense through 20.1.5
CVE-2018-18958
OP
Opnsense
Opnsense
6.5
1%
Jun 17OPNsense 18.7.x before 18.7.7 has Incorrect Access Control
CVE-2019-11816
OP
Opnsense
Opnsense
7.2
3%
May 20Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via…