TI-2026-34085 CVE-2026-46368 · GHSA-crmc-hfvp-6m66
luci-app-https-dns-proxy Authenticated Command Injection via setInitAction
Priority HIGH 73
luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed and not installed by default — contains a command in…