OP
Product
openwrt
138
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 36Medium 90Low 2
Watch
Add openwrt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30872 | 9.8 | Mar 19 | OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup Affected: >= 25.12.0-rc1, < 25.12.1; < 24.10.6 |
| CVE-2026-30871 | 9.8 | Mar 19 | OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query Affected: < 24.10.6; >= 25.12.0-rc1, < 25.12.1 |
| CVE-2025-20683 | 9.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20682 | 9.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20681 | 9.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20674 | 9.8 | Jun 2 | In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check Affected: 19.07.0; 21.02.0; 21.02.0; 23.05 |
| CVE-2025-20654 | 9.8 | Apr 7 | In wlan service, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2024-20017 | 9.8 | Mar 4 | In wlan service, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0 |
| CVE-2020-28951 | 9.8 | Nov 19 | libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names Affected: before 18.06.9; 19.07.0 before 19.07.5 |
| CVE-2026-62948 | 9.6 | Jul 15 | OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI Affected: < 25.12.5 |
Showing 10