openwrt luci

• CVE-2026-55897 High 8.8 luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root 0.7%
• CVE-2026-62381 Medium 6.6 luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow 0.1%
• CVE-2026-72842 Critical 9.9 OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass 0.6%
• CVE-2026-72841 Critical 9.9 luci-app-openvpn Path Traversal RCE via instance_name2 0.6%
• CVE-2026-72840 High 8.8 OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write 0.4%
• CVE-2026-69096 High 8.8 OpenWrt luci-app-dockerman Read ACL Remote Code Execution 3.3%
• CVE-2026-69095 High 7.5 OpenWrt luci-app-bmx7 Path Traversal via bmx7-info 0.9%
• CVE-2026-68583 Medium 5.4 luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name 0.2%
• CVE-2026-67352 High 7.6 luci-app-https-dns-proxy Stored XSS via resolver_url 0.4%
• CVE-2026-61876 High 8.8 LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting 1.6%
• CVE-2026-61875 High 8.8 luci-app-upnp Stored XSS via UPnP Port Mapping Description 0.4%
• CVE-2026-59260 High 8.8 OpenWrt luci-app-samba4 read ACL remote code execution via smbd 0.9%
• CVE-2026-32721 High 8.6 LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal 0.2%