OP
Vendor
openwrt
12 products with CVEs on record
173
CVEs
0
On KEV
6
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-55606
New
OD
odhcpd
openwrt
6.5
0%
Oct 23odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()
CVE-2026-53918
New
OD
odhcpd
openwrt
8.8
1%
Oct 23odhcpd DHCPv6 IA dangling first pointer use-after-free
CVE-2026-53920
New
OD
odhcpd
openwrt
8.7
0%
Oct 23odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure
CVE-2026-53921
New
OD
odhcpd
openwrt
9.8
1%
Oct 23odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)
CVE-2026-53922
OD
odhcpd
openwrt
6.5
1%
Oct 12odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
CVE-2026-55897
LU
luci
openwrt
8.8
1%
Sep 21luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root
CVE-2026-55159
LU
luci-app-adblock-fast
openwrt
8.8
1%
Sep 21luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries
CVE-2026-62381
LU
luci
openwrt
6.6
0%
Aug 22luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow
CVE-2026-72842
LU
luci
openwrt
9.9
1%
Aug 13OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass
CVE-2026-72841
LU
luci
openwrt
9.9
1%
Aug 13luci-app-openvpn Path Traversal RCE via instance_name2
CVE-2026-72840
LU
luci
openwrt
8.8
0%
Aug 13OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write
CVE-2026-69096
LU
luci
openwrt
8.8
3%
Aug 3OpenWrt luci-app-dockerman Read ACL Remote Code Execution
CVE-2026-69095
LU
luci
openwrt
7.5
1%
Aug 3OpenWrt luci-app-bmx7 Path Traversal via bmx7-info
CVE-2026-68583
LU
luci
openwrt
5.4
0%
Aug 2luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name
CVE-2026-67352
LU
luci
openwrt
7.6
0%
Aug 1luci-app-https-dns-proxy Stored XSS via resolver_url
CVE-2026-62947
OP
openwrt
openwrt
4.9
1%
Jul 15OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download
CVE-2026-62948
OP
openwrt
openwrt
9.6
1%
Jul 15OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname โ†’ stored XSS in the LuCI admin UI
CVE-2026-62184
LU
luci-app-banip
openwrt
7.5
1%
Jul 13luci-app-banip Log Monitor IP Extraction Bypass
CVE-2026-61876
LU
luci
openwrt
8.8
2%
Jul 12LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
CVE-2026-61875
LU
luci
openwrt
8.8
0%
Jul 12luci-app-upnp Stored XSS via UPnP Port Mapping Description
CVE-2026-59260
LU
luci
openwrt
8.8
1%
Jul 12OpenWrt luci-app-samba4 read ACL remote code execution via smbd
CVE-2026-55490
OP
openwrt
openwrt
6.5
1%
Jul 7OpenWrt: EAD Integer Underflow โ†’ Pre-Auth Denial of Service
CVE-2026-58652
TR
travelmate
openwrt
7.5
1%
Jul 2luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter
CVE-2026-58000
LU
luci-proto-openvpn
openwrt
8.8
2%
Jun 29luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey
CVE-2026-57999
LU
luci-app-tailscale-community
openwrt
8.8
1%
Jun 29luci-app-tailscale-community - Command Injection via tailscale.do_login RPC
CVE-2026-32721
LU
luci
openwrt
4.8
0%
Mar 19LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
CVE-2026-30874
OP
openwrt
openwrt
7.8
0%
Mar 19OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation
CVE-2026-30873
OP
openwrt
openwrt
4.9
1%
Mar 19OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens
CVE-2026-30872
OP
openwrt
openwrt
9.8
2%
Mar 19OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup
CVE-2026-30871
OP
openwrt
openwrt
9.8
1%
Mar 19OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query
CVE-2026-20435
OP
Openwrt
Openwrt
4.6
0%
Mar 2In preloader, there is a possible read of device unique identifiers due to a logic error
CVE-2026-20430
OP
Openwrt
Openwrt
8.8
0%
Mar 2In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check
CVE-2026-20419
OP
Openwrt
Openwrt
6.5
1%
Feb 2In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception
CVE-2026-20408
OP
Openwrt
Openwrt
8.8
0%
Feb 2In wlan, there is a possible out of bounds write due to a heap buffer overflow
CVE-2025-20765
OP
Openwrt
Openwrt
4.7
0%
Dec 2In aee daemon, there is a possible system crash due to a race condition
CVE-2025-20748
OP
Openwrt
Openwrt
6.7
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20741
OP
Openwrt
Openwrt
6.7
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20747
OP
Openwrt
Openwrt
6.7
0%
Nov 4In gnss service, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20746
OP
Openwrt
Openwrt
6.7
0%
Nov 4In gnss service, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20739
OP
Openwrt
Openwrt
6.7
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20738
OP
Openwrt
Openwrt
6.7
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20736
OP
Openwrt
Openwrt
6.7
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20734
OP
Openwrt
Openwrt
5.3
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20732
OP
Openwrt
Openwrt
5.3
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20731
OP
Openwrt
Openwrt
5.3
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20729
OP
Openwrt
Openwrt
4.2
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20742
OP
Openwrt
Openwrt
8.0
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20737
OP
Openwrt
Openwrt
7.8
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20735
OP
Openwrt
Openwrt
7.8
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20733
OP
Openwrt
Openwrt
7.8
0%
Nov 4In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20730
OP
Openwrt
Openwrt
6.7
0%
Nov 4In preloader, there is a possible escalation of privilege due to an insecure default value
CVE-2025-62526
OP
openwrt
openwrt
7.8
0%
Oct 22OpenWrt ubusd vulnerable to heap buffer overflow
CVE-2025-62525
OP
openwrt
openwrt
8.8
0%
Oct 22OpenWrt vulnerable to local privilage escalation
CVE-2025-20724
OP
Openwrt
Openwrt
5.5
0%
Oct 14In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
CVE-2025-20717
OP
Openwrt
Openwrt
7.8
0%
Oct 14In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20716
OP
Openwrt
Openwrt
7.8
0%
Oct 14In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20715
OP
Openwrt
Openwrt
7.8
0%
Oct 14In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20722
OP
Openwrt
Openwrt
5.5
0%
Oct 14In gnss driver, there is a possible out of bounds read due to an integer overflow
CVE-2025-20714
OP
Openwrt
Openwrt
7.8
0%
Oct 14In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
CVE-2025-20713
OP
Openwrt
Openwrt
7.8
0%
Oct 14In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check