Known vulnerabilities in OPNsense 26.7.1

Vendor: Deciso
Software: OPNsense
Version: 26.7.1
Software CPE: cpe:2.3:a:deciso:opnsense:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OPNsense version 26.7.1 OPNsense 26.7.1 is affected by 6 vulnerabilities: 6 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.2 14.08.2026 SB20260814122
#VU142553 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.2 14.08.2026 SB20260814122
#VU142554 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.2 14.08.2026 SB20260814122
#VU142555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.2 14.08.2026 SB20260814122
#VU142551 - Command injection
CWE-77 Low
No
No
26.7.2 14.08.2026 SB20260814122
#VU142550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.2 14.08.2026 SB20260814122