Deciso

Products

ProductCVEsExploitedLatest
OPNsense3–Feb 20, 2026

Exploited and recent CVEs

  • CVE-2026-2035 Medium 6.8 Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability 1.6%
  • CVE-2025-13698 Medium 4.5 Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability 0.6%
  • CVE-2025-34182 Medium 5.1 Deciso OPNsense < 25.7.4 /interfaces_ppps_edit.php ptpid Stored XSS 0.3%