openwrt openwrt

• CVE-2026-53922 Medium 6.5 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) 0.6%
• CVE-2026-62947 Medium 4.9 OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download 0.5%
• CVE-2026-62948 Critical 9.6 OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI 0.6%
• CVE-2026-55490 Medium 6.5 OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service 0.7%
• CVE-2026-32721 High 8.6 LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal 0.2%
• CVE-2026-30874 Low 1.8 OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation 0.3%
• CVE-2026-30873 Low 2.4 OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens 0.5%
• CVE-2026-30872 Critical 9.5 OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup 2.4%
• CVE-2026-30871 Critical 9.5 OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query 1.3%
• CVE-2025-62526 High 7.9 OpenWrt ubusd vulnerable to heap buffer overflow 0.3%
• CVE-2025-62525 High 7.9 OpenWrt vulnerable to local privilage escalation 0.2%