Advisories · Technology
openwrt.
Every CVE that names openwrt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
- openwrt odhcpd
- openwrt
- Memory corruption
- CVSS 4.9 Medium
OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download
- openwrt
- Path traversal
- CVSS 9.6 CriticalCritical · CVSS 9+
OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI
- openwrt
- Cross-site scripting (XSS)
- Other injection
- CVSS 6.5 Medium
OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service
- openwrt
- Memory corruption
- CVSS 8.6 High
LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
- openwrt luci
- openwrt
- Cross-site scripting (XSS)
- CVSS 1.8 Low
OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation
- openwrt
- Other injection
- Privilege escalation
- CVSS 2.4 Low
OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens
- openwrt
- Denial of service
- CVSS 9.5 CriticalCritical · CVSS 9+
OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup
- openwrt
- Memory corruption
- CVSS 9.5 CriticalCritical · CVSS 9+
OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query
- openwrt
- Memory corruption
- CVSS 7.9 High
OpenWrt ubusd vulnerable to heap buffer overflow
- openwrt
- Memory corruption
- CVSS 7.9 High
OpenWrt vulnerable to local privilage escalation
- openwrt
- Memory corruption
- CWE-20
- CVSS 4.0 Medium
Improper certificate validation in OpenWRT
- OpenWRT
- Weak cryptography or TLS
- CVSS 4.0 Medium
Improper certificate validation in OpenWRT
- OpenWRT
- Weak cryptography or TLS