Opnsense vulnerabilities
36 CVEs and advisories name Opnsense as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-25372OPNsense 19.1 Reflected XSS via diag_traceroute.php
- CVE-2019-25371OPNsense 19.1 Reflected XSS via diag_ping.php
- CVE-2019-25370OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php
- CVE-2019-25369OPNsense 19.1 Stored XSS via system_advanced_sysctl.php
- CVE-2019-25368OPNsense 19.1 Reflected XSS via diag_backup.php
- CVE-2025-50989OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_ed