en
OPNsense is an open-source, FreeBSD-based firewall and routing platform maintained as a security-focused software project. It provides network filtering, routing, VPN, monitoring, intrusion prevention, and related management capabilities for individuals, organizations, and service operators. It is delivered as software for physical, virtual, and purpose-built deployments.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/22/2026, opnsense recorded 11 security vulnerabilities in the last 90 days across 1 products, including 6 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, core had the most security vulnerabilities in the opnsense ecosystem, with 11 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-71490OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protectionCVE-2026-63442OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP BlockingCVE-2026-58390OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status viewsCVE-2026-58394OPNsense: Stored XSS in Administration Settings via Certificate DescriptionCVE-2026-58392OPNsense: Stored XSS in Services: NTP GPS47 Results | Page 1 of 5
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityCritical |
| SeverityMedium |
| SeverityHigh |