openwrt

Records169All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high50CVSS 7.0–8.9

Exploited now

openwrt records in CISA KEV

No openwrt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openwrt 137 records HIGH Luci 6 records MEDIUM Lede 2 records LOW Libuci 1 record LOW

Records

6 records in Luci · all components

TI-2023-09913 CVE-2023-24181

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected…

MEDIUM 58

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2023-04-10 No fix listed CWE-79

TI-2022-19894 CVE-2022-41435 · GHSA-2pp5-7m97-7f6x

OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored…

MEDIUM 58

OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00608 Published 2022-11-03 No fix listed CWE-79

TI-2019-09158 CVE-2019-12272 · GHSA-4g44-5j4j-c7x6

In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and…

MEDIUM 52

In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07369 Published 2019-05-23 No fix listed CWE-78

TI-2026-25213 CVE-2026-32721

LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal

LOW 39

LuCI is the OpenWrt Configuration Interface.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00238 Published 2026-03-19 Fixed in 26.072.65753~068150b, 24.10.6 +1 CWE-79

TI-2021-09199 CVE-2021-27821 · GHSA-4r8j-5v22-gg78

The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a…

LOW 28

The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00591 Published 2021-05-25 No fix listed CWE-79

TI-2020-08756 CVE-2020-10871 · GHSA-hcgf-6hm9-4pgw

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of…

LOW 27

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01679 Published 2020-03-23 No fix listed CWE-200

Open these records in search →