Multiple vulnerabilities in OPNsense can be exploited by a remote, anonymous attacker to bypass security measures and execute arbitrary code.