Login Request a demo
DD
Product
DD-WRT
by DD-WRT · last CVE Jul 16, 2026
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news3Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities8Critical1High3Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add DD-WRT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-27137
In wildKEV
8.1
4%
Jul 16
DD-WRT Stack-Based Buffer Overflow Vulnerability
Affected: before 45724
CVE-2022-27631
9.8
1%
Aug 5
A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599
Affected: Revision 32270 - Revision 48599
CVE-2020-13976
8.8
2%
Jun 9
An issue was discovered in DD-WRT through 16214
Affected: through 16214
CVE-2012-6297
8.8
2%
Feb 6
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious…
Affected: 24
CVE-2009-2766
–
5%
Aug 14
httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change…
Affected: 24
CVE-2009-2765
–
83%
Aug 14
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a…
Affected: through 24
CVE-2008-6975
–
1%
Aug 14
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that…
Affected: 24
CVE-2008-6974
–
1%
Aug 14
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for…
Affected: through 24
Showing 8