LU
Product
luci
by openwrt · last CVE Sep 21, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 7Low 0
Watch

Add luci to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72842
9.9
1%
Aug 13
OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass
Affected: through 24.10.8; 25.12.0 through 25.12.5
CVE-2026-72841
9.9
1%
Aug 13
luci-app-openvpn Path Traversal RCE via instance_name2
Affected: before 24.10.7; 25.12.0 before 25.12.4
CVE-2019-12272
9.8
7%
May 23
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command…
Affected: through 0.10.0
Showing 3