Product by Opnsense
Core
22 known vulnerabilities in Core (Opnsense), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-44194 | OPNsense: RCE on user managment | 9.1 | |
| Critical | CVE-2026-57155 | OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer | 9.9 | |
| High | CVE-2026-58390 | OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views | 8.0 | |
| High | CVE-2026-53582 | OPNsense: XPATH Injection can disclose any secret in config.xml | 7.1 | |
| Critical | CVE-2026-44193 | OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method | 9.1 | |
| Critical | CVE-2026-53581 | ntp: write path traversal | 9.0 | |
| Critical | CVE-2026-45158 | OPNsense: Command Injection via Attacker-Controlled DHCP Config | 9.1 | |
| High | CVE-2026-63442 | OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking | 8.1 | |
| High | CVE-2026-71490 | OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection | 7.1 | |
| High | CVE-2026-119409 | OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting | 7.2 | |
| Medium | CVE-2026-58393 | OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files | 5.9 | |
| High | CVE-2026-34578 | OPNsense has an LDAP Injection via Unsanitized Username in Authentication | 8.2 | |
| Medium | CVE-2026-119423 | OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username | 5.3 | |
| Medium | CVE-2026-119424 | OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity | 6.8 | |
| Medium | CVE-2026-58391 | OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout | 5.4 | |
| Medium | CVE-2026-58392 | OPNsense: Stored XSS in Services: NTP GPS | 5.4 | |
| Medium | CVE-2026-119560 | OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields | 5.9 | |
| Medium | CVE-2026-58395 | OPNsense: XPath injection in MVC safe-delete | 4.3 | |
| Medium | CVE-2026-58394 | OPNsense: Stored XSS in Administration Settings via Certificate Description | 5.2 | |
| Medium | CVE-2026-119425 | OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP | 5.4 | |
| Medium | CVE-2026-44195 | OPNsense: Authentication lockout bypass | 6.5 | |
| High | CVE-2026-30868 | Cross-Site Request Forgery (CSRF) in opnsense/core | 6.3 |