openwrt

Top products

The 15 most recently published vulnerabilities affecting openwrt.

• CVE-2026-69096OpenWrt luci-app-dockerman Read ACL Remote Code Execution8.8Aug 3, 2026
• CVE-2026-69095OpenWrt luci-app-bmx7 Path Traversal via bmx7-info7.5Aug 3, 2026
• CVE-2026-68583luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name5.4Aug 2, 2026
• CVE-2026-67352luci-app-https-dns-proxy Stored XSS via resolver_url7.6Aug 1, 2026
• CVE-2026-62947OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download4.9Jul 15, 2026
• CVE-2026-62948OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI9.6Jul 15, 2026
• CVE-2026-62184luci-app-banip Log Monitor IP Extraction Bypass7.5Jul 13, 2026
• CVE-2026-61876LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting8.8Jul 12, 2026
• CVE-2026-61875luci-app-upnp Stored XSS via UPnP Port Mapping Description8.8Jul 12, 2026
• CVE-2026-59260OpenWrt luci-app-samba4 read ACL remote code execution via smbd8.8Jul 12, 2026
• CVE-2026-55490OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service6.5Jul 7, 2026
• CVE-2026-58652luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter7.5Jul 2, 2026
• CVE-2026-58000luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey8.8Jun 29, 2026
• CVE-2026-57999luci-app-tailscale-community - Command Injection via tailscale.do_login RPC8.8Jun 29, 2026
• CVE-2026-32721LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal8.6Mar 19, 2026