firewall vulnerabilities
CVEs whose affected-version data names the firewall package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115425Medium· 5.6Multiple cross-site scripting (XSS) in OPNsense
Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a speci…
▾ SunlitOPNsense · OPNsense firewallEPSS 0.29%via CVEORG
CVE-2022-3236Critical· 9.8CISA KEV0dayPoCA code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
▾ HadalSophos · Sophos FirewallEPSS 99%via CVEORG