Log in Start free

openwrt

Products

ProductCVEsExploitedLatest
luci13–Sep 21, 2026
openwrt11–Oct 12, 2026
odhcpd5–Oct 23, 2026
uhttpd3–Oct 30, 2026
asu1–Dec 6, 2024
luci-proto-openvpn1–Jun 29, 2026
travelmate1–Jul 2, 2026
luci-app-travelmate1–Jul 2, 2026
luci-app-adblock-fast1–Sep 21, 2026
luci-app-banip1–Jul 13, 2026
luci-app-tailscale-community1–Jun 29, 2026

Exploited and recent CVEs

  • CVE-2026-55614 Medium 6.9 uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching 0.4%
  • CVE-2026-55612 Low 3.7 uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset 0.3%
  • CVE-2026-55613 Medium 6.9 uhttpd: HTTP request smuggling via ubus POST body parse-error desync 0.4%
  • CVE-2026-55606 Medium 6.5 odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp() 0.5%
  • CVE-2026-53918 High 8.8 odhcpd DHCPv6 IA dangling first pointer use-after-free 0.6%
  • CVE-2026-53920 High 8.7 odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure 0.4%
  • CVE-2026-53921 Critical 9.8 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites) 1.1%
  • CVE-2026-53922 Medium 6.5 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) 0.6%
  • CVE-2026-53922 Medium 6.5 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) 0.6%
  • CVE-2026-55897 High 8.8 luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root 0.7%
  • CVE-2026-55159 High 8.8 luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries 0.7%
  • CVE-2026-62381 Medium 6.6 luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow 0.1%
  • CVE-2026-72842 Critical 9.9 OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass 0.6%
  • CVE-2026-72841 Critical 9.9 luci-app-openvpn Path Traversal RCE via instance_name2 0.6%
  • CVE-2026-72840 High 8.8 OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write 0.4%
  • CVE-2026-69096 High 8.8 OpenWrt luci-app-dockerman Read ACL Remote Code Execution 3.3%
  • CVE-2026-69095 High 7.5 OpenWrt luci-app-bmx7 Path Traversal via bmx7-info 0.9%
  • CVE-2026-68583 Medium 5.4 luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name 0.2%
  • CVE-2026-67352 High 7.6 luci-app-https-dns-proxy Stored XSS via resolver_url 0.4%
  • CVE-2026-62947 Medium 4.9 OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download 0.5%
  • CVE-2026-62948 Critical 9.6 OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI 0.6%
  • CVE-2026-62184 High 7.5 luci-app-banip Log Monitor IP Extraction Bypass 0.6%
  • CVE-2026-61876 High 8.8 LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting 1.6%
  • CVE-2026-61875 High 8.8 luci-app-upnp Stored XSS via UPnP Port Mapping Description 0.4%
  • CVE-2026-59260 High 8.8 OpenWrt luci-app-samba4 read ACL remote code execution via smbd 0.9%
  • CVE-2026-55490 Medium 6.5 OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service 0.7%
  • CVE-2026-58652 High 7.5 luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter 0.7%
  • CVE-2026-58652 High 7.5 luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter 0.7%
  • CVE-2026-58000 High 8.8 luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey 1.7%
  • CVE-2026-57999 High 8.8 luci-app-tailscale-community - Command Injection via tailscale.do_login RPC 1.5%