Read the docs

Deciso

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Deciso records in CISA KEV

No Deciso vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-01692 CVE-2026-2035 · GHSA-6q4c-4x29-76qv

OS command injection in Deciso OPNsense

Priority LOW 35

Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.0159 Published 2026-02-20 No fix listed CWE-78
TI-2025-24331 CVE-2025-34182 · GHSA-v8ch-859h-ggwh

Deciso OPNsense < 25.7.4 /interfaces_ppps_edit.php ptpid Stored XSS

Priority LOW 23

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00335 Published 2025-10-01 Fixed in 25.7.4 CWE-79
TI-2025-12519 CVE-2025-13698 · GHSA-78fv-p8mj-wxvm

Path traversal in Deciso OPNsense

Priority LOW 22

Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability.

CVSS 3.0MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00611 Published 2025-12-23 No fix listed CWE-22
Open these records in search →