Login Request a demo
LU
Product
luci
by openwrt · last CVE Sep 21, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 3High 8Medium 7Low 0
Severity
All severities18Critical3High8Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add luci to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62381
6.6
0%
Aug 22
luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow
Affected: through 42d72f79cd8f057f241595abc761b39dab2d9f07
CVE-2021-27821
6.1
1%
May 25
The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability
Affected: through 19.07.0
CVE-2026-68583
5.4
0%
Aug 2
luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name
Affected: before 1.2.4-4
CVE-2023-24181
5.4
1%
Apr 10
LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm
Affected: 22.03.3
CVE-2022-41435
5.4
1%
Nov 3
OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js
Affected: git-22.140.66206-02913be
CVE-2020-10871
5.3
2%
Mar 23
In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services
Affected: git-20.049.11521-bebfe20; git-20.078.22902-0ed0d42
CVE-2026-32721
4.8
0%
Mar 19
LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
Affected: < 26.072.65753~068150b
Showing 7