O
Vendor security profile
opnsense
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
12toplam CVE
Uncertain12 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
8.0
5.2
5.4
CVE-2026-58392OPNsense: Stored XSS in Services: NTP GPS
Patch status unknownEPSS %0
4.3
CVE-2026-58395OPNsense: XPath injection in MVC safe-delete
Patch status unknownEPSS %0
9.9
CVE-2026-57155OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
Patch status unknown Public Exploits:1EPSS %1
5.4
7.1
CVE-2026-53582OPNsense: XPATH Injection can disclose any secret in config.xml
Patch status unknown Public Exploits:1EPSS %1