OpenWrt vulnerabilities
Security vulnerabilities in OpenWrt, the open-source Linux-based firmware widely deployed in consumer routers, small-business gateways, and embedded network devices. Flaws in OpenWrt affect the underlying routing and DHCPv6/DNS infrastructure of countless home and enterprise networks.
We track 3 OpenWrt CVEs; none is on CISA's KEV catalog yet.
- CVEs tracked
- 3
- On CISA KEV
- 0
- Ransomware use
- 0
- Rated critical
- 2
Latest OpenWrt coverage
Our reporting filed under OpenWrt, plus any story that cites one of its CVEs.
Three Critical OpenWrt LuCI Flaws Allow Root RCE
Two CVSS 9.9 and one 8.8 vulnerabilities in OpenWrt's LuCI web interface let authenticated users execute arbitrary code as root. Update LuCI now.
OpenWrt Patches Critical DHCPv6 RCE in Default Server
OpenWrt 24.10.8 patches a critical stack overflow in odhcpd — the DHCPv6 server enabled by default — allowing unauthenticated RCE as root. Patch now.
Other OpenWrt CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-72842 OpenWrt LuCI Container App ACL Bypass Leads to Root RCEwrite-up | [ CRITICAL ] | 9.9 | 0.6% | — |
| CVE-2026-72841 OpenWrt LuCI OpenVPN App Path Traversal Enables Root RCEwrite-up | [ CRITICAL ] | 9.9 | 0.6% | — |
| CVE-2026-72840 OpenWrt LuCI Mount App ACL Misconfiguration Grants Root Cron Writewrite-up | [ HIGH ] | 8.8 | 0.4% | — |
Not on CISA KEV as of our last sync. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org.
Machine-readable: /api/v1/vendors/openwrt.json.
Every CVE row links to its record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker, the vendor scorecard, or all vendors.