openwrt vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-53921 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt.Critical 9.8 · Oct 23, 2026
• CVE-2026-53920 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt.High 8.7 · Oct 23, 2026
• CVE-2026-53918 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt.High 8.8 · Oct 23, 2026
• CVE-2026-55897 luci-app-advanced-reboot is a LuCI (web interface) application for OpenWrt that provides a way to reboot your router into an alternative firmware partition or High 8.8 · Sep 21, 2026
• CVE-2026-55159 luci-app-adblock-fast a WebUI for fast, lightweight DNS-based ad-blocker for OpenWrt that works with dnsmasq, smartdns, or unbound.High 8.8 · Sep 21, 2026
• CVE-2026-72842 luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes withoCritical 9.4 · Aug 13, 2026
• CVE-2026-72841 luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arCritical 9.4 · Aug 13, 2026
• CVE-2026-72840 OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for moHigh 8.7 · Aug 13, 2026
• CVE-2026-69096 OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an OSHigh 8.7 · Aug 3, 2026
• CVE-2026-69095 OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unaHigh 8.7 · Aug 3, 2026
• CVE-2026-62948 OpenWrt is a Linux operating system targeting embedded devices.Critical 9.6 · Jul 15, 2026
• CVE-2026-62184 luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, alloHigh 8.7 · Jul 13, 2026
• CVE-2026-61876 LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup.Critical 9.4 · Jul 12, 2026
• CVE-2026-61875 luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAPHigh 8.7 · Jul 12, 2026
• CVE-2026-59260 OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-cHigh 8.7 · Jul 12, 2026
• CVE-2026-58652 luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd session holding the luci-app-travelmate write ACL is granted cHigh 7.7 · Jul 2, 2026
• CVE-2026-58000 luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameteHigh 8.7 · Jun 29, 2026
• CVE-2026-57999 luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated users to execute arbitrarHigh 7.7 · Jun 29, 2026
• CVE-2026-32721 LuCI is the OpenWrt Configuration Interface.High 8.6 · Mar 19, 2026
• CVE-2026-30872 OpenWrt Project is a Linux operating system targeting embedded devices.Critical 9.5 · Mar 19, 2026
• CVE-2026-30871 OpenWrt Project is a Linux operating system targeting embedded devices.Critical 9.5 · Mar 19, 2026
• CVE-2025-62526 OpenWrt Project is a Linux operating system targeting embedded devices.High 7.9 · Oct 22, 2025
• CVE-2025-62525 OpenWrt Project is a Linux operating system targeting embedded devices.High 7.9 · Oct 22, 2025
• CVE-2024-54143 openwrt/asu is an image on demand server for OpenWrt based distributions.Critical 9.3 · Dec 6, 2024
• CVE-2024-51240 An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed byHigh 8 · Nov 5, 2024