Skip to content
Opnsense vulnerabilities
Newest
-
opnsense os-acme-client
An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of...
CVE-2026-123025
Public exploit
9.4 Critical
-
opnsense core
OPNsense: Configuration line injection via multiple GUI text fields
CVE-2026-57154
8.1 High
-
opnsense core
OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields
CVE-2026-119560
6.0 Medium
-
opnsense core
OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP
CVE-2026-119425
5.3 Medium
-
opnsense core
OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity
CVE-2026-119424
6.1 Medium
-
opnsense core
OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
CVE-2026-119409
8.6 High
-
opnsense core
REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation
CVE-2026-117536
8.6 High
-
opnsense core
REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool
CVE-2026-117535
5.1 Medium
-
opnsense core
REDAXO before 5.21.3 CSRF in Article History Plugin
CVE-2026-117534
5.1 Medium
-
opnsense core
REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads
CVE-2026-117533
2.1 Low
-
opnsense core
REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin
CVE-2026-117532
Public exploit
9.3 Critical
-
opnsense core
REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets
CVE-2026-116900
5.1 Medium
-
opnsense core
REDAXO before 5.21.4 Broken Access Control in Slice Operations
CVE-2026-116899
7.1 High
-
opnsense core
REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move
CVE-2026-116898
7.1 High
-
opnsense core
REDAXO before 5.21.4 Missing Authorization in Version and History Previews
CVE-2026-116897
7.1 High
-
opnsense core
REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables
CVE-2026-116896
7.7 High
-
opnsense core
REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter
CVE-2026-116895
5.1 Medium
-
opnsense core
REDAXO before 5.21.5 Insufficient Session Expiration on Password Change
CVE-2026-116894
2.3 Low
-
opnsense core
REDAXO core before 5.21.5 Missing Authorization in rex_api_package API
CVE-2026-116893
6.1 Medium
-
opnsense firewall
Multiple cross-site scripting (XSS) in OPNsense
CVE-2026-115425
5.6 Medium
-
openremote core
OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId
CVE-2026-116186
2.3 Low
-
openremote core
OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos
CVE-2026-116185
5.3 Medium
-
openremote core
OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket
CVE-2026-116184
2.1 Low
-
opnsense core
OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
CVE-2026-71490
7.1 High
-
opnsense core
OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username
CVE-2026-119423
6.9 Medium
-
opnsense core
OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
CVE-2026-63442
8.1 High
-
opnsense core
OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
CVE-2026-58390
8.0 High
-
opnsense core
OPNsense: Stored XSS in Administration Settings via Certificate Description
CVE-2026-58394
5.2 Medium
-
opnsense core
OPNsense: Stored XSS in Services: NTP GPS
CVE-2026-58392
5.4 Medium
-
opnsense core
OPNsense: XPath injection in MVC safe-delete
CVE-2026-58395
4.3 Medium
-
opnsense core
OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
CVE-2026-58393
5.9 Medium
-
opnsense core
OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
CVE-2026-57155
Public exploit
9.9 Critical
-
opnsense core
OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
CVE-2026-58391
5.4 Medium
-
opnsense core
OPNsense: XPATH Injection can disclose any secret in config.xml
CVE-2026-53582
Public exploit
7.1 High
-
cheshire-cat-ai core
Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin
CVE-2026-108725
5.1 Medium
-
@capacitor android, ios, ionic-team capacitor +2 more +4 more
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
CVE-2026-103922
Public exploitFix available
9.3 Critical
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core user impersonation in a file-request feature
CVE-2026-102107
4.6 Medium
-
accellion kiteworks, kiteworks core +1 more
Missing authentication on a Kiteworks appliance setup function
CVE-2026-102110
5.9 Medium
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Improper Validation of Specified Quantity in Input
CVE-2026-102111
4.9 Medium
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Local Privilege Escalation
CVE-2026-102112
7.8 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Local Privilege Escalation
CVE-2026-102113
7.8 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core OS Command Injection
CVE-2026-102114
7.2 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Authentication Bypass in the Password Reset Workflow
CVE-2026-102115
9.8 Critical
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Remote Code Execution
CVE-2026-102117
7.2 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
CVE-2026-102118
7.8 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core OS Command Injection
CVE-2026-102120
8.8 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Incorrect Authorization
CVE-2026-102122
4.3 Medium
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Path Traversal
CVE-2026-102123
7.4 High
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Missing Authentication for Critical Function
CVE-2026-102124
6.5 Medium
-
accellion kiteworks, kiteworks core +1 more
Kiteworks Core Sandbox Escape
CVE-2026-102125
8.8 High
- Show olderLoading…