Approved changes feed: RSS · Atom
cpe:2.3:a:opnsense:core:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opnsense (0c16b43f-1f96-5263-8196-89d403711aa5) |
|---|---|
| Product | Core (bb08eb70-6afe-5c2b-bdd0-962b7f154cde) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-53581 |
vulnerable | 2026-09-16 04:33:52.806830 |
ntp: write path traversal
CRITICAL (9)
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulating the GPS or PPS serial port parameter, an attacker with access to the NTP configuration can escape the intended directory and force the system to write user-controlled data to any file on the filesystem. Version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core patch the issue.
Published: 2026-09-08T23:02:07.003Z
Updated: 2026-09-09T13:37:23.831Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45158 |
vulnerable | 2026-06-08 08:05:11.482888 |
OPNsense: Command Injection via Attacker-Controlled DHCP Config
CRITICAL (9.1)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell script, allowing remote code execution as root on the underlying operating system. This vulnerability is fixed in 26.1.8.
Published: 2026-05-13T21:54:31.679Z
Updated: 2026-05-14T12:22:09.189Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44195 |
vulnerable | 2026-06-08 08:03:18.110730 |
OPNsense: Authentication lockout bypass
MEDIUM (5.3)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication failure counter for their IP address. By interjecting a crafted username containing a success keyword ("Accepted" or "Successful login") between normal brute-force attempts, an attacker can prevent the failure counter from ever reaching the lockout threshold. This vulnerability is fixed in 26.1.7.
Published: 2026-05-13T21:52:42.373Z
Updated: 2026-05-14T13:46:30.721Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44194 |
vulnerable | 2026-06-08 08:03:18.110295 |
OPNsense: RCE on user managment
CRITICAL (9.1)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileges to execute arbitrary system commands as root. An attacker can bypass input validation by formatting their malicious payload as a compliant email address, allowing shell commands to reach the underlying operating system. The flaw exists in the local user synchronization flow, within core/src/opnsense/scripts/auth/sync_user.php. This vulnerability is fixed in 26.1.8.
Published: 2026-05-13T21:53:27.948Z
Updated: 2026-05-19T03:55:23.384Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44193 |
vulnerable | 2026-06-08 08:03:18.109162 |
OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
CRITICAL (9.1)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. This vulnerability is fixed in 26.1.7.
Published: 2026-05-13T21:52:04.150Z
Updated: 2026-05-16T03:56:17.546Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34578 |
vulnerable | 2026-06-08 07:59:12.712663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30868 |
vulnerable | 2026-06-08 07:57:14.400800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.