OPNsense vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
35 matching records
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.53%May 13, 2026
- Medium6.5OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.32%May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 5.67%May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.69%May 13, 2026
- High8.2OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.41%Apr 9, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.15%Mar 11, 2026
- Medium6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.59%Feb 20, 2026
- Medium4.5Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability.Check this weekEPSS 61.00%Dec 23, 2025
- Medium5.1In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/stringsCheck if you run itEPSS 0.34%Oct 1, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check this weekEPSS 10.93%Aug 27, 2025