Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

OPNsense Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-53581`ntp: write path traversal	Exploitation statusPublic exploit	FixNot confirmed	Affected productcore	Published09/08/2026	SeverityCritical
`CVE-2026-45158`OPNsense: Command Injection via Attacker-Controlled DHCP Config	Exploitation statusNot known exploited	FixYes	Affected productcore	Published05/13/2026	SeverityCritical
`CVE-2026-44194`OPNsense: RCE on user managment	Exploitation statusPublic exploit	FixYes	Affected productcore	Published05/13/2026	SeverityCritical
`CVE-2026-44195`OPNsense: Authentication lockout bypass	Exploitation statusPublic exploit	FixYes	Affected productcore	Published05/13/2026	SeverityMedium
`CVE-2026-44193`OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method	Exploitation statusPublic exploit	FixYes	Affected productcore	Published05/13/2026	SeverityCritical
`CVE-2026-34578`OPNsense has an LDAP Injection via Unsanitized Username in Authentication	Exploitation statusPublic exploit	FixYes	Affected productcore	Published04/09/2026	SeverityHigh
`CVE-2026-30868`Cross-Site Request Forgery (CSRF) in opnsense/core	Exploitation statusPublic exploit	FixYes	Affected productcore	Published03/11/2026	SeverityMedium
`CVE-2019-25377`OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25376`OPNsense 19.1 Reflected XSS via proxy endpoint	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25375`OPNsense 19.1 Reflected XSS via monit interface	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25374`OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25373`OPNsense 19.1 Stored XSS via firewall_rules_edit.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25372`OPNsense 19.1 Reflected XSS via diag_traceroute.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25371`OPNsense 19.1 Reflected XSS via diag_ping.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25370`OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25369`OPNsense 19.1 Stored XSS via system_advanced_sysctl.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2019-25368`OPNsense 19.1 Reflected XSS via diag_backup.php	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published02/15/2026	SeverityMedium
`CVE-2025-50989`CVE-2025-50989	Exploitation statusPublic exploit	FixYes	Affected productOPNsense	Published08/27/2025	SeverityCritical
`CVE-2023-27152`CVE-2023-27152	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/23/2023	SeverityUnknown
`CVE-2023-44276`CVE-2023-44276	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/28/2023	SeverityUnknown
`CVE-2023-44275`CVE-2023-44275	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/28/2023	SeverityUnknown
`CVE-2023-38998`CVE-2023-38998	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39005`CVE-2023-39005	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39002`CVE-2023-39002	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-38999`CVE-2023-38999	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39000`CVE-2023-39000	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39001`CVE-2023-39001	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39007`CVE-2023-39007	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39004`CVE-2023-39004	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39003`CVE-2023-39003	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39008`CVE-2023-39008	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-39006`CVE-2023-39006	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2023-38997`CVE-2023-38997	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/09/2023	SeverityUnknown
`CVE-2021-42770`CVE-2021-42770	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/08/2021	SeverityUnknown
`CVE-2020-23015`CVE-2020-23015	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/03/2021	SeverityUnknown
`CVE-2018-18958`CVE-2018-18958	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/17/2019	SeverityUnknown
`CVE-2019-11816`CVE-2019-11816	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/20/2019	SeverityUnknown

37 / 37 Results

All vulnerabilities loaded

Security vulnerabilities from OPNsense

OPNsense

Verify to analyze this security profile

How many security vulnerabilities does OPNsense have?

Which OPNsense product has the most security vulnerabilities?

Run an in-depth assessment with complete web risk management

Popular OPNsense products

OPNsense

core