Opnsense
22 CVEs tracked since 2023. Since Aug 2023, none of them reached CISA KEV.
Opnsense CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2023-08 | 12 | 0 |
| 2023-09 | null or fewer | |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | null or fewer | |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | null or fewer | |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | null or fewer | |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | null or fewer | |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | null or fewer | |
| 2025-11 | null or fewer | |
| 2025-12 | null or fewer | |
| 2026-01 | null or fewer | |
| 2026-02 | 10 | 0 |
Products
The products that kept showing up in Opnsense's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Opnsense.
- CVE-2026-53581ntp: write path traversal9.0
- CVE-2026-45158OPNsense: Command Injection via Attacker-Controlled DHCP Config9.1
- CVE-2026-44194OPNsense: RCE on user managment9.1
- CVE-2026-44195OPNsense: Authentication lockout bypass5.3
- CVE-2026-44193OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method9.1
- CVE-2026-34578OPNsense has an LDAP Injection via Unsanitized Username in Authentication8.2
- CVE-2026-30868Cross-Site Request Forgery (CSRF) in opnsense/core6.3
- CVE-2019-25377OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php5.4
- CVE-2019-25376OPNsense 19.1 Reflected XSS via proxy endpoint6.1
- CVE-2019-25375OPNsense 19.1 Reflected XSS via monit interface6.1
- CVE-2019-25373OPNsense 19.1 Stored XSS via firewall_rules_edit.php6.4
- CVE-2019-25374OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php6.1
- CVE-2019-25372OPNsense 19.1 Reflected XSS via diag_traceroute.php6.1
- CVE-2019-25371OPNsense 19.1 Reflected XSS via diag_ping.php6.1
- CVE-2019-25369OPNsense 19.1 Stored XSS via system_advanced_sysctl.php6.4
The record
- Peak rank
- #77 in Aug 2023
- Busiest month shown
- Aug 2023, 12 CVEs
- Months with a KEV entry
- 0 since Aug 2023
- Monthly snapshots
- 2 since 2023