Known vulnerabilities in OPNsense - page 2

Vendor: Deciso
Software: OPNsense
Software CPE: cpe:2.3:a:deciso:opnsense:*:*:*:*:*:*:*:*
Total vulnerabilities: 36
Public exploits: 8
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OPNsense OPNsense is affected by 36 known vulnerabilities: 1 high, 11 medium, 24 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136897 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-57155
CWE-78 Medium
No
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136839 - Improper Output Neutralization for Logs
CVE-2026-63442
CWE-117 Medium
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136838 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-58394
CWE-79 Low
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136837 - Improper Neutralization of Data within XPath Expressions
CVE-2026-58395
CWE-643 Low
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136836 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-58392
CWE-79 Low
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136835 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-58391
CWE-79 Low
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-58390
CWE-79 Low
No
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136833 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-58393
CWE-22 Medium
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136832 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-57154
CWE-93 Medium
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU136831 - Incorrect Authorization
CVE-2026-71490
CWE-863 Medium
Available
No
26.1.11, 26.4.1p1 03.07.2026 SB2026070359
#VU134542 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-53581
CWE-22 Medium
No
No
26.1.9 15.06.2026 SB2026061549
#VU129775 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-44195
CWE-307 Medium
No
No
26.1.7 05.05.2026 SB2026050564
#VU129774 - Argument Injection or Modification
CVE-2026-44193
CWE-88 Low
No
No
26.1.7 05.05.2026 SB2026050564
#VU125578 - Cross-Site Request Forgery (CSRF)
CVE-2026-30868
CWE-352 Low
No
No
26.1.4 09.04.2026 SB2026040954
#VU122803 - Command injection
CVE-2026-2035
CWE-77 Low
No
No
- 13.02.2026 SB2026021330
#VU119097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-13698
CWE-22 Low
No
No
- 03.12.2025 SB2025120322


Showing elements 21 - 40 out of 36