Known Vulnerabilities for Opnsense by Opnsense Project
Listed below are 1 of the newest known vulnerabilities associated with "Opnsense" by "Opnsense Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45158 json | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP conf... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-44195 json | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allo... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-44194 json | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vuln... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-44193 json | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2023-39004 json | Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition b... | Not Provided | 2023-08-09 | 2026-07-09 |
| CVE-2023-39003 json | OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in t... | Not Provided | 2023-08-09 | 2026-07-09 |
| CVE-2017-1000479 json | pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execut... | 8.8 - HIGH | 2018-01-03 | 2019-05-30 |