Advisories · Technology
openwrt luci.
Every CVE that names openwrt luci among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root
- openwrt luci
- Command injection
- CVSS 6.9 Medium
luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow
- openwrt luci
- Memory corruption
- CVSS 9.4 CriticalCritical · CVSS 9+
OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass
- openwrt luci
- Path traversal
- CVSS 9.4 CriticalCritical · CVSS 9+
luci-app-openvpn Path Traversal RCE via instance_name2
- openwrt luci
- Path traversal
- CVSS 8.7 High
OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write
- openwrt luci
- Privilege escalation
- CVSS 8.7 High
OpenWrt luci-app-dockerman Read ACL Remote Code Execution
- openwrt luci
- Command injection
- CVSS 8.7 High
OpenWrt luci-app-bmx7 Path Traversal via bmx7-info
- openwrt luci
- Path traversal
- CVSS 5.1 Medium
luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name
- openwrt luci
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
luci-app-https-dns-proxy Stored XSS via resolver_url
- openwrt luci
- Cross-site scripting (XSS)
- CVSS 9.4 CriticalCritical · CVSS 9+
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
- openwrt luci
- Cross-site scripting (XSS)
- CVSS 8.7 High
luci-app-upnp Stored XSS via UPnP Port Mapping Description
- openwrt luci
- Cross-site scripting (XSS)
- CVSS 8.7 High
OpenWrt luci-app-samba4 read ACL remote code execution via smbd
- openwrt luci
- Privilege escalation
- CVSS 8.6 High
LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
- openwrt luci
- openwrt
- Cross-site scripting (XSS)