Deciso Opnsense
3 CVEs affecting Deciso Opnsense. Latest disclosed: 2026-02-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-2035 | Medium | 6.8 | 2026-02-20 | Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… |
CVE-2025-13698 | Medium | 4.5 | 2025-12-23 | Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows network-adjacent attackers to cre… |
CVE-2025-34182 | | 2025-10-01 | In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-relat… |