OPNsense
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 95 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 2, 2015 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
OPNsense: Stored XSS in Administration Settings via Certificate Description
OPNsense: Stored XSS in Services: NTP GPS
OPNsense: XPath injection in MVC safe-delete
OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
OPNsense: XPATH Injection can disclose any secret in config.xml
Monitor OPNsense in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.