OP
Product
openwrt
by openwrt · last CVE Oct 12, 2026
138
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 36Medium 90Low 2
Watch

Add openwrt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-20430
8.8
0%
Mar 2
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0; 23.05.0
CVE-2026-20408
8.8
0%
Feb 2
In wlan, there is a possible out of bounds write due to a heap buffer overflow
Affected: 19.07.0; 21.02.0; 23.05.0
CVE-2025-62525
8.8
0%
Oct 22
OpenWrt vulnerable to local privilage escalation
Affected: < 24.10.4
CVE-2025-20720
8.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20719
8.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20709
8.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20710
8.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an integer overflow
Affected: 19.07.0; 21.02.0
CVE-2025-20711
8.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20712
8.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 21.02.0; 23.05
CVE-2025-20686
8.8
0%
Jul 8
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20685
8.8
0%
Jul 8
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2024-20040
8.8
0%
Apr 1
In wlan firmware, there is a possible out of bounds write due to improper input validation
Affected: 19.07.0; 21.02.0
CVE-2021-28961
8.8
2%
Mar 21
applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests
Affected: 19.07.0
CVE-2019-17367
8.8
1%
Oct 18
OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, firewall/rules,…
Affected: 18
CVE-2018-11116
8.8
3%
Jun 19
OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus…
Affected: All versions, or not specified
CVE-2024-20104
8.4
0%
Nov 4
In da, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20053
8.4
0%
Apr 1
In flashc, there is a possible out of bounds write due to an uncaught exception
Affected: 19.07.0; 21.02.0
CVE-2024-20146
8.1
0%
Jan 6
In wlan STA driver, there is a possible out of bounds write due to improper input validation
Affected: 23.05
CVE-2020-7982
8.1
2%
Mar 16
An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7
Affected: 18.06.0 before 18.06.7; 19.07.0
CVE-2025-20742
8.0
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2026-30874
7.8
0%
Mar 19
OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation
Affected: < 24.10.6
CVE-2025-20737
7.8
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20735
7.8
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20733
7.8
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-62526
7.8
0%
Oct 22
OpenWrt ubusd vulnerable to heap buffer overflow
Affected: < 24.10.4
CVE-2025-20717
7.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20716
7.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20715
7.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20714
7.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20713
7.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20718
7.8
0%
Oct 14
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20705
7.8
0%
Sep 1
In monitor_hang, there is a possible memory corruption due to use after free
Affected: 19.07.0; 21.02.0
CVE-2022-38333
7.5
1%
Sep 19
Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value()
Affected: before 21.02.3; 22.03.0
CVE-2020-7248
7.5
2%
Mar 16
libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow
Affected: 18.06.0 before 18.06.7; 19.07.0; 19.07.0; 19.07.0
CVE-2019-19945
7.5
2%
Mar 16
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error
Affected: 18.06.0 through 18.06.5; 19.07.0; 19.07.0; 19.07.0
CVE-2023-20820
7.2
2%
Sep 4
In wlan service, there is a possible command injection due to improper input validation
Affected: 19.07.0; 21.02.0
Showing 36