Advisories · Technology
opnsense core.
Every CVE that names opnsense core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
OPNsense: Configuration line injection via multiple GUI text fields
- opnsense core
- Other injection
- CVSS 6.0 Medium
OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields
- opnsense core
- Other injection
- CVSS 5.3 Medium
OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP
- opnsense core
- Authentication bypass
- CVSS 6.1 Medium
OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity
- opnsense core
- Other injection
- CVSS 6.9 Medium
OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username
- opnsense core
- Other injection
- CVSS 8.6 High
OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
- opnsense core
- Command injection
- CVSS 7.1 High
OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
- opnsense core
- Broken access control
- CVSS 8.1 High
OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
- opnsense core
- Other injection
- CVSS 8.0 High
OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
- opnsense core
- Cross-site scripting (XSS)
- CVSS 5.2 Medium
OPNsense: Stored XSS in Administration Settings via Certificate Description
- opnsense core
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
OPNsense: Stored XSS in Services: NTP GPS
- opnsense core
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
OPNsense: XPath injection in MVC safe-delete
- opnsense core
- Other injection
- CVSS 5.9 Medium
OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
- opnsense core
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
- opnsense core
- Path traversal
- Command injection
- CVSS 5.4 Medium
OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
- opnsense core
- Cross-site scripting (XSS)
- CVSS 7.1 High
OPNsense: XPATH Injection can disclose any secret in config.xml
- opnsense core
- Other injection
- CVSS 9.0 CriticalCritical · CVSS 9+
ntp: write path traversal
- opnsense core
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
OPNsense: Command Injection via Attacker-Controlled DHCP Config
- opnsense core
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
OPNsense: RCE on user managment
- opnsense core
- Command injection
- CVSS 5.3 Medium
OPNsense: Authentication lockout bypass
- opnsense core
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
- opnsense core
- Command injection
- CVSS 8.2 High
OPNsense has an LDAP Injection via Unsanitized Username in Authentication
- opnsense core
- Other injection
- CVSS 6.3 Medium
Cross-Site Request Forgery (CSRF) in opnsense/core
- opnsense core
- Cross-site request forgery (CSRF)