[ Vendor · 10 CVEs ]
opnsense
CVEs affecting opnsense published in the last 30 days, plus any opnsense CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-63442 | 15 Oct 2026 | CVSS 8.1 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts… | |
| CVE-2026-71490 | 15 Oct 2026 | CVSS 7.1 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a directly assigned… | |
| CVE-2026-58391 | 15 Oct 2026 | CVSS 5.4 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and… | |
| CVE-2026-58392 | 15 Oct 2026 | CVSS 5.4 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in… | |
| CVE-2026-58393 | 15 Oct 2026 | CVSS 5.9 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field accepts… | |
| CVE-2026-58394 | 15 Oct 2026 | CVSS 5.2 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_admin.php reads certificate records into… | |
| CVE-2026-58395 | 15 Oct 2026 | CVSS 4.3 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through… | |
| CVE-2026-57155 | 15 Oct 2026 | CVSS 9.9 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and… | |
| CVE-2026-58390 | 15 Oct 2026 | CVSS 8.0 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in… | |
| CVE-2026-53582 | 15 Oct 2026 | CVSS 7.1 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate… |