OP
Vendor
openwrt
173
CVEs
0
On KEV
6
New 30D
Products
OD9.8
odhcpd
openwrt
5 CVEs0 on KEV5 new
OP9.8
openwrt
openwrt
138 CVEs0 on KEV1 new
LU9.9
luci
openwrt
20 CVEs0 on KEV0 new
LE8.1
Lede
Openwrt
2 CVEs0 on KEV0 new
AS9.3
asu
openwrt
1 CVEs0 on KEV0 new
LI7.5
Libuci
Openwrt
1 CVEs0 on KEV0 new
LU8.8
luci-app-adblock-fast
openwrt
1 CVEs0 on KEV0 new
LU7.5
luci-app-banip
openwrt
1 CVEs0 on KEV0 new
LU8.8
luci-app-tailscale-community
openwrt
1 CVEs0 on KEV0 new
LU7.5
luci-app-travelmate
openwrt
1 CVEs0 on KEV0 new
LU8.8
luci-proto-openvpn
openwrt
1 CVEs0 on KEV0 new
TR7.5
travelmate
openwrt
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55606 New | OD odhcpd openwrt | 6.5 | Oct 23 | odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp() |
| CVE-2026-53918 New | OD odhcpd openwrt | 8.8 | Oct 23 | odhcpd DHCPv6 IA dangling first pointer use-after-free |
| CVE-2026-53920 New | OD odhcpd openwrt | 8.7 | Oct 23 | odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure |
| CVE-2026-53921 New | OD odhcpd openwrt | 9.8 | Oct 23 | odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites) |
| CVE-2026-53922 | OD odhcpd openwrt | 6.5 | Oct 12 | odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) |
| CVE-2026-55897 | LU luci openwrt | 8.8 | Sep 21 | luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root |
| CVE-2026-55159 | LU luci-app-adblock-fast openwrt | 8.8 | Sep 21 | luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries |
| CVE-2026-62381 | LU luci openwrt | 6.6 | Aug 22 | luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow |
| CVE-2026-72842 | LU luci openwrt | 9.9 | Aug 13 | OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass |
| CVE-2026-72841 | LU luci openwrt | 9.9 | Aug 13 | luci-app-openvpn Path Traversal RCE via instance_name2 |
| CVE-2026-72840 | LU luci openwrt | 8.8 | Aug 13 | OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write |
| CVE-2026-69096 | LU luci openwrt | 8.8 | Aug 3 | OpenWrt luci-app-dockerman Read ACL Remote Code Execution |
| CVE-2026-69095 | LU luci openwrt | 7.5 | Aug 3 | OpenWrt luci-app-bmx7 Path Traversal via bmx7-info |
| CVE-2026-68583 | LU luci openwrt | 5.4 | Aug 2 | luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name |
| CVE-2026-67352 | LU luci openwrt | 7.6 | Aug 1 | luci-app-https-dns-proxy Stored XSS via resolver_url |
| CVE-2026-62947 | OP openwrt openwrt | 4.9 | Jul 15 | OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download |
| CVE-2026-62948 | OP openwrt openwrt | 9.6 | Jul 15 | OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname โ stored XSS in the LuCI admin UI |
| CVE-2026-62184 | LU luci-app-banip openwrt | 7.5 | Jul 13 | luci-app-banip Log Monitor IP Extraction Bypass |
| CVE-2026-61876 | LU luci openwrt | 8.8 | Jul 12 | LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting |
| CVE-2026-61875 | LU luci openwrt | 8.8 | Jul 12 | luci-app-upnp Stored XSS via UPnP Port Mapping Description |
| CVE-2026-59260 | LU luci openwrt | 8.8 | Jul 12 | OpenWrt luci-app-samba4 read ACL remote code execution via smbd |
| CVE-2026-55490 | OP openwrt openwrt | 6.5 | Jul 7 | OpenWrt: EAD Integer Underflow โ Pre-Auth Denial of Service |
| CVE-2026-58652 | TR travelmate openwrt | 7.5 | Jul 2 | luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter |
| CVE-2026-58000 | LU luci-proto-openvpn openwrt | 8.8 | Jun 29 | luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey |
| CVE-2026-57999 | LU luci-app-tailscale-community openwrt | 8.8 | Jun 29 | luci-app-tailscale-community - Command Injection via tailscale.do_login RPC |
| CVE-2026-32721 | LU luci openwrt | 4.8 | Mar 19 | LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal |
| CVE-2026-30874 | OP openwrt openwrt | 7.8 | Mar 19 | OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation |
| CVE-2026-30873 | OP openwrt openwrt | 4.9 | Mar 19 | OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens |
| CVE-2026-30872 | OP openwrt openwrt | 9.8 | Mar 19 | OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup |
| CVE-2026-30871 | OP openwrt openwrt | 9.8 | Mar 19 | OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query |
| CVE-2026-20435 | OP Openwrt Openwrt | 4.6 | Mar 2 | In preloader, there is a possible read of device unique identifiers due to a logic error |
| CVE-2026-20430 | OP Openwrt Openwrt | 8.8 | Mar 2 | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2026-20419 | OP Openwrt Openwrt | 6.5 | Feb 2 | In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception |
| CVE-2026-20408 | OP Openwrt Openwrt | 8.8 | Feb 2 | In wlan, there is a possible out of bounds write due to a heap buffer overflow |
| CVE-2025-20765 | OP Openwrt Openwrt | 4.7 | Dec 2 | In aee daemon, there is a possible system crash due to a race condition |
| CVE-2025-20748 | OP Openwrt Openwrt | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20741 | OP Openwrt Openwrt | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20747 | OP Openwrt Openwrt | 6.7 | Nov 4 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20746 | OP Openwrt Openwrt | 6.7 | Nov 4 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20739 | OP Openwrt Openwrt | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20738 | OP Openwrt Openwrt | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20736 | OP Openwrt Openwrt | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20734 | OP Openwrt Openwrt | 5.3 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20732 | OP Openwrt Openwrt | 5.3 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20731 | OP Openwrt Openwrt | 5.3 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20729 | OP Openwrt Openwrt | 4.2 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20742 | OP Openwrt Openwrt | 8.0 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20737 | OP Openwrt Openwrt | 7.8 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20735 | OP Openwrt Openwrt | 7.8 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20733 | OP Openwrt Openwrt | 7.8 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20730 | OP Openwrt Openwrt | 6.7 | Nov 4 | In preloader, there is a possible escalation of privilege due to an insecure default value |
| CVE-2025-62526 | OP openwrt openwrt | 7.8 | Oct 22 | OpenWrt ubusd vulnerable to heap buffer overflow |
| CVE-2025-62525 | OP openwrt openwrt | 8.8 | Oct 22 | OpenWrt vulnerable to local privilage escalation |
| CVE-2025-20724 | OP Openwrt Openwrt | 5.5 | Oct 14 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check |
| CVE-2025-20717 | OP Openwrt Openwrt | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20716 | OP Openwrt Openwrt | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20715 | OP Openwrt Openwrt | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20722 | OP Openwrt Openwrt | 5.5 | Oct 14 | In gnss driver, there is a possible out of bounds read due to an integer overflow |
| CVE-2025-20714 | OP Openwrt Openwrt | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
| CVE-2025-20713 | OP Openwrt Openwrt | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check |
