CVE-2026-30868 - OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC AP

CVE-2026-2035 - Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability. This

CVE-2019-25377 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability in the system_advanced_sysctl.

CVE-2019-25376 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated at

CVE-2019-25375 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated at

CVE-2019-25374 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to injec

CVE-2019-25373 - OPNsense 19.1 contains a stored cross-site scripting vulnerability that allows authenticated attacke

CVE-2019-25372 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated at

CVE-2019-25371 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated at

CVE-2019-25370 - OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to injec

CVE-2019-25369 - OPNsense 19.1 contains a stored cross-site scripting vulnerability in the system_advanced_sysctl.php

CVE-2019-25368 - OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint