Vulnerabilidades en OpenWRT
38 resultadosCVE-2026-62948CRITICALOpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UIEPSS 0.6%CVE-2026-62184HIGHluci-app-banip Log Monitor IP Extraction BypassEPSS 0.6%CVE-2026-62947MEDIUMOpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-downloadEPSS 0.5%CVE-2026-30873LOWOpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokensEPSS 0.5%CVE-2026-55606MEDIUModhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()EPSS 0.5%CVE-2026-72840HIGHOpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab WriteEPSS 0.4%CVE-2026-67352MEDIUMluci-app-https-dns-proxy Stored XSS via resolver_urlEPSS 0.4%CVE-2026-55613MEDIUMuhttpd: HTTP request smuggling via ubus POST body parse-error desyncEPSS 0.4%CVE-2026-53920HIGHodhcpd DHCPv6 Short IA_NA/IA_PD Body Stack DisclosureEPSS 0.4%CVE-2026-55614MEDIUMuhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matchingEPSS 0.4%CVE-2026-61875HIGHluci-app-upnp Stored XSS via UPnP Port Mapping DescriptionEPSS 0.4%CVE-2026-30874LOWOpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege EscalationEPSS 0.3%CVE-2026-55612LOWuhttpd vulnerable to HTTP request smuggling via invalid chunk-length state resetEPSS 0.3%CVE-2025-62526HIGHOpenWrt ubusd vulnerable to heap buffer overflowEPSS 0.3%CVE-2026-32721HIGHLuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modalEPSS 0.2%CVE-2026-68583MEDIUMluci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.nameEPSS 0.2%CVE-2025-62525HIGHOpenWrt vulnerable to local privilage escalationEPSS 0.2%CVE-2026-62381MEDIUMluci-lib-px5g 2040-bit Certificate Signing Heap Buffer OverflowEPSS 0.1%