Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Deciso Clear all filters
TI-2026-01692 CVE-2026-2035 · GHSA-6q4c-4x29-76qv

OS command injection in Deciso OPNsense

Priority LOW 35

Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.0159 Published 2026-02-20 No fix listed CWE-78
TI-2025-12519 CVE-2025-13698 · GHSA-78fv-p8mj-wxvm

Path traversal in Deciso OPNsense

Priority LOW 22

Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability.

CVSS 3.0MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00611 Published 2025-12-23 No fix listed CWE-22
TI-2025-24331 CVE-2025-34182 · GHSA-v8ch-859h-ggwh

Deciso OPNsense < 25.7.4 /interfaces_ppps_edit.php ptpid Stored XSS

Priority LOW 23

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00335 Published 2025-10-01 Fixed in 25.7.4 CWE-79