OP
Product
openwrt
by openwrt · last CVE Oct 12, 2026
138
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 36Medium 90Low 2
Watch

Add openwrt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20692
5.5
0%
Jul 8
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20691
5.5
0%
Jul 8
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20690
5.5
0%
Jul 8
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20689
5.5
0%
Jul 8
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20688
5.5
0%
Jul 8
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-24182
5.4
1%
Apr 11
LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js
Affected: 22.03.3
CVE-2021-45906
5.4
1%
Dec 27
OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen
Affected: 21.02.1
CVE-2021-45905
5.4
1%
Dec 27
OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen
Affected: 21.02.1
CVE-2021-45904
5.4
1%
Dec 27
OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen
Affected: 21.02.1
CVE-2021-33425
5.4
1%
May 25
A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the…
Affected: 19.07.0
CVE-2019-25015
5.4
1%
Jan 26
LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID
Affected: 18.06.0 through 18.06.4
CVE-2019-18993
5.4
1%
Dec 3
OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-Link Archer C7…
Affected: 18.06.4
CVE-2019-18992
5.4
1%
Dec 3
OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New Source NAT" (this can…
Affected: 18.06.4
CVE-2025-20734
5.3
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20732
5.3
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20731
5.3
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2024-20147
5.3
0%
Feb 3
In Bluetooth FW, there is a possible reachable assertion due to improper exception handling
Affected: 23.05
CVE-2023-32871
5.3
0%
May 6
In DA, there is a possible permission bypass due to an incorrect status check
Affected: 19.07.0; 21.02.0
CVE-2026-62947
4.9
1%
Jul 15
OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download
Affected: < 25.12.5
CVE-2026-30873
4.9
1%
Mar 19
OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens
Affected: >= 25.12.0-rc1, < 25.12.1; < 24.10.6
CVE-2026-32721
4.8
0%
Mar 19
LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
Affected: < 24.10.6; >= 25.12.0, < 25.12.1
CVE-2025-20765
4.7
0%
Dec 2
In aee daemon, there is a possible system crash due to a race condition
Affected: 21.02.0; 23.05.0
CVE-2026-20435
4.6
0%
Mar 2
In preloader, there is a possible read of device unique identifiers due to a logic error
Affected: 21.02.0; 23.05.0
CVE-2024-20152
4.4
0%
Jan 6
In wlan STA driver, there is a possible reachable assertion due to improper exception handling
Affected: 23.05
CVE-2024-20085
4.4
0%
Sep 2
In power, there is a possible out of bounds read due to a missing bounds check
Affected: 19.07.0; 21.02; 22.03.5
CVE-2024-20084
4.4
0%
Sep 2
In power, there is a possible out of bounds read due to a missing bounds check
Affected: 19.07.0; 21.02; 22.03.5
CVE-2024-20071
4.4
0%
Jun 3
In wlan driver, there is a possible out of bounds read due to improper input validation
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20052
4.4
0%
Apr 1
In flashc, there is a possible information disclosure due to an uncaught exception
Affected: 19.07.0; 21.02.0
CVE-2024-20050
4.4
0%
Apr 1
In flashc, there is a possible information disclosure due to an uncaught exception
Affected: 19.07.0; 21.02.0
CVE-2024-20049
4.4
0%
Apr 1
In flashc, there is a possible information disclosure due to an uncaught exception
Affected: 19.07.0; 21.02.0
CVE-2023-32815
4.4
0%
Sep 4
In gnss service, there is a possible out of bounds read due to improper input validation
Affected: 19.07.0; 21.02.0
CVE-2023-32813
4.4
0%
Sep 4
In gnss service, there is a possible out of bounds write due to improper input validation
Affected: 19.07.0; 21.02.0
CVE-2023-20796
4.4
0%
Aug 7
In power, there is a possible memory corruption due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20790
4.4
0%
Aug 7
In nvram, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20729
4.2
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20651
4.1
0%
Mar 3
In da, there is a possible out of bounds read due to a missing bounds check
Affected: 21.02.0; 23.05
CVE-2023-20726
3.3
0%
May 15
In mnld, there is a possible leak of GPS location due to a missing permission check
Affected: 19.07.0; 21.02.0
CVE-2024-20051
2.3
0%
Apr 1
In flashc, there is a possible system crash due to an uncaught exception
Affected: 19.07.0; 21.02.0
Page 3 of 3 · 138 total