Openwrt vulnerabilities

Products

• Openwrt 138
• Luci 20
• Odhcpd 5
• Uhttpd 3
• Lede 2

Newest

• openwrt uhttpd uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching CVE-2026-55614 6.9 MediumOctober 30, 2026
• openwrt uhttpd uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset CVE-2026-55612 3.7 LowOctober 30, 2026
• openwrt uhttpd uhttpd: HTTP request smuggling via ubus POST body parse-error desync CVE-2026-55613 6.9 MediumOctober 30, 2026
• openwrt odhcpd odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp() CVE-2026-55606 6.5 MediumOctober 23, 2026
• openwrt odhcpd odhcpd DHCPv6 IA dangling first pointer use-after-free CVE-2026-53918 8.8 HighOctober 23, 2026
• openwrt odhcpd odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure CVE-2026-53920 8.7 HighOctober 23, 2026
• openwrt odhcpd odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites) CVE-2026-53921 Public exploit 9.8 CriticalOctober 23, 2026
• openwrt odhcpd, openwrt +1 more odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) CVE-2026-53922 6.5 MediumOctober 12, 2026
• openwrt luci luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root CVE-2026-55897 8.8 HighSeptember 21, 2026
• openwrt luci-app-adblock-fast luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries CVE-2026-55159 8.8 HighSeptember 21, 2026
• openwrt luci luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow CVE-2026-62381 6.9 MediumAugust 22, 2026
• openwrt luci OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass CVE-2026-72842 9.4 CriticalAugust 13, 2026
• openwrt luci luci-app-openvpn Path Traversal RCE via instance_name2 CVE-2026-72841 9.4 CriticalAugust 13, 2026
• openwrt luci OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write CVE-2026-72840 8.7 HighAugust 13, 2026
• openwrt luci OpenWrt luci-app-dockerman Read ACL Remote Code Execution CVE-2026-69096 8.7 HighAugust 3, 2026
• openwrt luci OpenWrt luci-app-bmx7 Path Traversal via bmx7-info CVE-2026-69095 8.7 HighAugust 3, 2026
• openwrt luci luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name CVE-2026-68583 5.1 MediumAugust 2, 2026
• openwrt luci luci-app-https-dns-proxy Stored XSS via resolver_url CVE-2026-67352 6.8 MediumAugust 1, 2026
• openwrt OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download CVE-2026-62947 4.9 MediumJuly 15, 2026
• openwrt OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI CVE-2026-62948 9.6 CriticalJuly 15, 2026
• openwrt luci-app-banip luci-app-banip Log Monitor IP Extraction Bypass CVE-2026-62184 8.7 HighJuly 13, 2026
• openwrt luci LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting CVE-2026-61876 Public exploit 9.4 CriticalJuly 12, 2026
• openwrt luci luci-app-upnp Stored XSS via UPnP Port Mapping Description CVE-2026-61875 8.7 HighJuly 12, 2026
• openwrt luci OpenWrt luci-app-samba4 read ACL remote code execution via smbd CVE-2026-59260 8.7 HighJuly 12, 2026
• openwrt OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service CVE-2026-55490 6.5 MediumJuly 7, 2026
• openwrt luci-app-travelmate, travelmate +1 more luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter CVE-2026-58652 7.7 HighJuly 2, 2026
• openwrt luci-proto-openvpn luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey CVE-2026-58000 8.7 HighJune 29, 2026
• openwrt luci-app-tailscale-community luci-app-tailscale-community - Command Injection via tailscale.do_login RPC CVE-2026-57999 7.7 HighJune 29, 2026
• openwrt luci, openwrt +1 more LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal CVE-2026-32721 8.6 HighMarch 19, 2026
• openwrt OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation CVE-2026-30874 1.8 LowMarch 19, 2026
• openwrt OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens CVE-2026-30873 2.4 LowMarch 19, 2026
• openwrt OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup CVE-2026-30872 9.5 CriticalMarch 19, 2026
• openwrt OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query CVE-2026-30871 9.5 CriticalMarch 19, 2026
• google android, linuxfoundation yocto, mediatek, inc. mediatek chipset +3 more +5 more In preloader, there is a possible read of device unique identifiers due to a logic error. This... CVE-2026-20435 Fix available 4.6 MediumMarch 2, 2026
• mediatek software development kit, mediatek, inc. mediatek chipset, openwrt +2 more In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2026-20430 8.8 HighMarch 2, 2026
• mediatek nbiot sdk, software development kit, mediatek, inc. mediatek chipset +1 more +3 more In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught... CVE-2026-20419 6.5 MediumFebruary 2, 2026
• mediatek software development kit, mediatek, inc. mediatek chipset, openwrt +2 more In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead... CVE-2026-20408 8.8 HighFebruary 2, 2026
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8113, mt8115, mt8139, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8512, mt8516, mt8518, mt8519, mt8532, mt8676, mt8678, mt8695, mt8696, mt8698 +1 more +3 more In aee daemon, there is a possible system crash due to a race condition. This could lead to local... CVE-2025-20765 4.7 MediumDecember 2, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20748 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20741 6.7 MediumNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 more In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20747 6.7 MediumNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 more In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20746 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20739 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20738 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20736 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20734 5.3 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20732 5.3 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20731 5.3 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20729 4.2 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7603, mt7615, mt7622, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20742 8.0 HighNovember 4, 2025
• Show olderLoading…