Known vulnerabilities in OPNsense 26.7

Vendor: Deciso
Software: OPNsense
Version: 26.7
Software CPE: cpe:2.3:a:deciso:opnsense:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OPNsense version 26.7 OPNsense 26.7 is affected by 8 vulnerabilities: 1 medium, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.2 14.08.2026 SB20260814122
#VU139366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.1 26.07.2026 SB2026072602
#VU139367 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.1 26.07.2026 SB2026072602
#VU139368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.1 26.07.2026 SB2026072602
#VU139369 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
26.7.1 26.07.2026 SB2026072602
#VU139365 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
26.7.1 26.07.2026 SB2026072602
#VU139364 - Incorrect Authorization
CWE-863 Low
No
No
26.7.1 26.07.2026 SB2026072602
#VU139363 - Resource exhaustion
CWE-400 Medium
No
No
26.7.1 26.07.2026 SB2026072602