Skip to content
OpenAdvisories

Vendor

opnsense

36 known vulnerabilities.

Products

core 23 OPNsense 11 os-acme-client 1 OPNsense firewall 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-123025 Public exploit

    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-…

    opnsense os-acme-client
  • Critical 9.9
    CVE-2026-57155 Public exploit

    OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

    OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV country_code value to cons…

    opnsense core
  • Critical 9.0
    CVE-2026-53581

    ntp: write path traversal

    OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the …

    opnsense core
  • Critical 9.1
    CVE-2026-45158

    OPNsense: Command Injection via Attacker-Controlled DHCP Config

    OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell script, allowing remote code execution as root on the underlying …

    opnsense core
  • Critical 9.1
    CVE-2026-44194

    OPNsense: RCE on user managment

    OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileges to execute arbitrary system commands as root. An attacker…

    opnsense core
  • Critical 9.1
    CVE-2026-44193

    OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method

    OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. This vulnerability is fixed in 26.1.7.

    opnsense core
  • Critical 9.1
    CVE-2025-50989 EPSS 11%

    OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint …

    opnsense OPNsense