Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how opnsense compares to other vendors in security performance

View Risk Score →

OPNsense OPNsenseOPNsense < 26.1.9 Stored XSS via Certificate Description Field

Risk 34
Severity
5.1
First published (updated )
CVE-2026-49132

OPNsense OPNsenseOPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field

Risk 34
Severity
5.1
First published (updated )
CVE-2026-49131

OPNsense OPNsense 26.7End of life details

First published (updated )
EOL-opnsense-26.7

OPNsense OPNsenseOPNsense: Command Injection via Attacker-Controlled DHCP Config

Risk 72
Severity
9.1
First published (updated )
CVE-2026-45158

OPNsense OPNsenseOPNsense: RCE on user managment

Risk 72
Severity
9.1
First published (updated )
CVE-2026-44194
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsenseOPNsense: Authentication lockout bypass

Risk 40
Severity
6.5
First published (updated )
CVE-2026-44195

OPNsense OPNsenseOPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method

Risk 72
Severity
9.1
First published (updated )
CVE-2026-44193

OPNsense OPNsenseOPNsense has an LDAP Injection via Unsanitized Username in Authentication

Risk 54
Severity
8.2
First published (updated )
CVE-2026-34578

OPNsense coreCross-Site Request Forgery (CSRF) in opnsense/core

Risk 42
Severity
8.1
EPSS
0.01%
First published (updated )
CVE-2026-30868

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via system_advanced_sysctl.php

Risk 38
Severity
4.8
First published (updated )
CVE-2019-25377
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via proxy endpoint

Risk 38
Severity
5.1
First published (updated )
CVE-2019-25376

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via monit interface

Risk 38
Severity
5.1
First published (updated )
CVE-2019-25375

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php

Risk 38
Severity
5.1
First published (updated )
CVE-2019-25374

OPNsense OPNsenseOPNsense 19.1 Stored XSS via firewall_rules_edit.php

Risk 39
Severity
6.4
First published (updated )
CVE-2019-25373

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via diag_traceroute.php

Risk 38
Severity
5.1
First published (updated )
CVE-2019-25372
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via diag_ping.php

Risk 38
Severity
5.1
First published (updated )
CVE-2019-25371

Deciso OPNsenseOPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php

Risk 38
Severity
5.1
First published (updated )
CVE-2019-25370

OPNsense OPNsenseOPNsense 19.1 Stored XSS via system_advanced_sysctl.php

Risk 39
Severity
6.4
First published (updated )
CVE-2019-25369

OPNsense OPNsenseOPNsense 19.1 Reflected XSS via diag_backup.php

Risk 34
Severity
4.8
First published (updated )
CVE-2019-25368

OPNsense OPNsense 26.1Reached end of life

EOL
Jul 15, 2026
First published (updated )
EOL-opnsense-26.1
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Questionable CVE's ported against dnsmasq

First published (updated )
https://seclists.org/oss-sec/2025/q4/91

Questionable CVE's ported against dnsmasq

First published (updated )
https://seclists.org/oss-sec/2025/q4/89

Deciso OPNsenseOS Command Injection, Command Injection, Input Validation

Risk 72
Severity
9.1
First published (updated )
CVE-2025-50989

OPNsense OPNsense 25.7Reached end of life

EOL
Jan 28, 2026
First published (updated )
EOL-opnsense-25.7

OPNsense OPNsense 25.1Reached end of life

EOL
Jul 23, 2025
First published (updated )
EOL-opnsense-25.1
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OPNsense OPNsense 24.7Reached end of life

EOL
Jan 28, 2025
First published (updated )
latest-version-opnsense-24.7

OPNsense OPNsense 24.7Reached end of life

EOL
Jan 28, 2025
First published (updated )
EOL-opnsense-24.7

OPNsense OPNsense 24.1Reached end of life

EOL
Jul 25, 2024
First published (updated )
latest-version-opnsense-24.1

OPNsense OPNsense 24.1Reached end of life

EOL
Jul 25, 2024
First published (updated )
EOL-opnsense-24.1

OPNsense OPNsenseDECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a…

Risk 86
Severity
9.8
First published (updated )
CVE-2023-27152
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203