OpenWRT OpenWRT vulnerabilities
13 published CVEs name OpenWRT OpenWRT among the affected products.
- 13Published CVEs13 of them scored
- 9Last 12 monthspublished in the last year
- 3Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-53922
odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
openwrt · odhcpd
Medium6.5 - CVE-2026-62947
OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download
openwrt · openwrt
Medium4.9 - CVE-2026-62948
OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI
openwrt · openwrt
Critical9.6 - CVE-2026-55490
OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service
openwrt · openwrt
Medium6.5 - CVE-2026-32721
LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
openwrt · luci
High8.6 - CVE-2026-30874
OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation
openwrt · openwrt
Low1.8 - CVE-2026-30873
OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens
openwrt · openwrt
Low2.4 - CVE-2026-30872
OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup
openwrt · openwrt
Critical9.5 - CVE-2026-30871
OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query
openwrt · openwrt
Critical9.5 - CVE-2025-62526
OpenWrt ubusd vulnerable to heap buffer overflow
openwrt · openwrt
High7.9