Where
-Infinity
0

OPNsense OPNsenseOPNsense < 26.1.9 Stored XSS via Certificate Description Field

Risk 34
Severity
5.1
First published (updated )

OPNsense OPNsenseOPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field

Risk 34
Severity
5.1
First published (updated )

OPNsense OPNsense 26.7End of life details

First published (updated )

OPNsense OPNsenseOPNsense: Command Injection via Attacker-Controlled DHCP Config

Risk 72
Severity
9.1
First published (updated )

OPNsense OPNsenseOPNsense: RCE on user managment

Risk 72
Severity
9.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsenseOPNsense: Authentication lockout bypass

Risk 40
Severity
6.5
First published (updated )

OPNsense OPNsenseOPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method

Risk 72
Severity
9.1
First published (updated )

OPNsense OPNsenseOPNsense has an LDAP Injection via Unsanitized Username in Authentication

Risk 54
Severity
8.2
First published (updated )

OPNsense coreCross-Site Request Forgery (CSRF) in opnsense/core

Risk 42
Severity
8.1
EPSS
0.01%
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via system_advanced_sysctl.php

Risk 38
Severity
4.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via proxy endpoint

Risk 38
Severity
5.1
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via monit interface

Risk 38
Severity
5.1
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php

Risk 38
Severity
5.1
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Stored XSS via firewall_rules_edit.php

Risk 39
Severity
6.4
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via diag_traceroute.php

Risk 38
Severity
5.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via diag_ping.php

Risk 38
Severity
5.1
First published (updated )

Deciso OPNsenseOPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php

Risk 38
Severity
5.1
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Stored XSS via system_advanced_sysctl.php

Risk 39
Severity
6.4
First published (updated )

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via diag_backup.php

Risk 34
Severity
4.8
First published (updated )

OPNsense OPNsense 26.1Reached end of life

EOL
Jul 15, 2026
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsense 25.7Reached end of life

EOL
Jan 28, 2026
First published (updated )

OPNsense OPNsenseOPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain …

Risk 43
Severity
7.5
First published (updated )

OPNsense OPNsenseInsecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23…

Risk 86
Severity
9.8
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203