CVE-20XX-?

Opnsense CVEs.

Published CVEs affecting Opnsense, ranked by exploit odds.

2 CVEs · updated 2026-11-06 03:33 UTC

Reset all
  1. CVE-2026-44193

    OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. This vulnerability is fixed in 26.1.7.

    Code execution Network gear Opnsense

    9.1 CRITICAL 0.7% exploit odds Fix listed
  2. CVE-2026-45158

    OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell script, allowing remote code execution as root on the underlying operating system. This vulnerability is fixed in 26.1.8.

    Code execution Network gear Opnsense

    9.1 CRITICAL 0.5% exploit odds Fix listed

All CVEs affecting Opnsense that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.