UpstreamscvelistV5 00:11ZCISA KEV 01:18ZVulnrichment 00:11ZNVD 00:11ZEPSS 01:18Zdaily run 06:05 UTC · next hourly 02:15

Thu 5 Nov 2026

Today

120 new ≥ 9.0 · 11 actionable · OPNsense clear

PriorityVulnerabilityCVSSEPSSSignals

OPNsense1 vulnerabilityMax CVSS 9.4Priority 38KEV 0

38

CVE-2026-123025

OPNsense os-acme-client · An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin thro…

9.40.6%

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works