Deciso Opnsense vulnerabilities

• deciso opnsense OPNsense < 26.1.9 Stored XSS via Certificate Description Field CVE-2026-49132 5.1 MediumAugust 3, 2026
• deciso opnsense OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field CVE-2026-49131 5.1 MediumAugust 3, 2026
• deciso opnsense Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability CVE-2026-2035 6.8 MediumFebruary 20, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php CVE-2019-25377 4.8 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via proxy endpoint CVE-2019-25376 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via monit interface CVE-2019-25375 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php CVE-2019-25374 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Stored XSS via firewall_rules_edit.php CVE-2019-25373 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via diag_traceroute.php CVE-2019-25372 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via diag_ping.php CVE-2019-25371 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php CVE-2019-25370 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Stored XSS via system_advanced_sysctl.php CVE-2019-25369 5.1 MediumFebruary 15, 2026
• deciso opnsense OPNsense 19.1 Reflected XSS via diag_backup.php CVE-2019-25368 4.8 MediumFebruary 15, 2026
• deciso opnsense Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability CVE-2025-13698 4.5 MediumDecember 23, 2025
• deciso opnsense Deciso OPNsense < 25.7.4 /interfaces_ppps_edit.php ptpid Stored XSS CVE-2025-34182 5.1 MediumOctober 1, 2025
• deciso opnsense OPNsense 25.1 contains an authenticated command injection vulnerability in its Bridge Interface... CVE-2025-50989 EPSS 10.9% 9.1 CriticalAugust 27, 2025