Home › OPNsense
OPNsense: which version is safe to update to?
Open-source firewall and routing platform based on FreeBSD. Every release below is checked against official notes, NVD CVE data and public community reports.
All recent releases
26.7.7
Probably fine — wait a few days
26.7.6 security
No problems reported
26.7.5 security
Safe to update
26.7.4
No widespread problems
26.7.3 security
No widespread problems
26.7.2 security
No widespread problems
26.7.1 security
Problems reported
26.7 breaking changes
No problems reported
Recent CVEs (last 120 days)
- CVE-2026-57155 CRITICAL 9.9 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an un…
- CVE-2026-53581 CRITICAL 9 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attac…
- CVE-2026-63442 HIGH 8.1 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters that survive LOG_AUTH processing through…
- CVE-2026-58390 HIGH 8 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a…
- CVE-2026-53582 HIGH 7.1 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expres…
- CVE-2026-71490 HIGH 7.1 OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a directly assigned comma-separated <priv> value as one string and then uses an exact comparison whe…
- CVE-2026-58393 MEDIUM 5.9 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field accepts path traversal sequences and openvpn_csc_conf_write() concatenates the…
- CVE-2026-58391 MEDIUM 5.4 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filter_rule.volt and nat…
The weekly "safe to update?" email
One short email a week: what shipped, what broke, and what's safe to install. No spam.
Thanks — you're on the list.
We store only your email address and the date you signed up, to send this newsletter. We never sell or share it. Every email will have a one-click unsubscribe; you can also ask us to delete your address at any time. Privacy details.