Priority HIGH 82
In wlan service, there is a possible out of bounds write due to improper input validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.46609 · Published 2024-03-04 · No fix listed CWE-20
Priority HIGH 76
OpenWrt is a Linux operating system targeting embedded devices.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0058 · Published 2026-07-15 · Fixed in 25.12.5 CWE-117
Priority MEDIUM 62
OpenWrt is a Linux operating system targeting embedded devices.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00682 · Published 2026-07-07 · Fixed in 25.12.5 CWE-191
Priority MEDIUM 58
LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00611 · Published 2023-04-11 · No fix listed CWE-79
Priority MEDIUM 56
OpenWrt is a Linux operating system targeting embedded devices.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00524 · Published 2026-07-15 · Fixed in 25.12.5 CWE-22
Priority MEDIUM 53
OpenWrt Project is a Linux operating system targeting embedded devices.
CVSS 4.0CRITICAL 9.5· Network · No auth · No interaction · EPSS 0.02359 · Published 2026-03-19 · Fixed in 25.12.1, 24.10.6 CWE-121
Priority MEDIUM 51
OpenWrt Project is a Linux operating system targeting embedded devices.
CVSS 4.0CRITICAL 9.5· Network · No auth · No interaction · EPSS 0.01286 · Published 2026-03-19 · Fixed in 24.10.6, 25.12.1 CWE-121
Priority MEDIUM 50
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00577 · Published 2025-07-08 · No fix listed CWE-787
Priority MEDIUM 50
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00577 · Published 2025-07-08 · No fix listed CWE-787
Priority MEDIUM 50
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00635 · Published 2025-07-08 · No fix listed CWE-787
Priority MEDIUM 50
In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00791 · Published 2025-06-02 · No fix listed CWE-863
Priority MEDIUM 50
In wlan service, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0082 · Published 2025-04-07 · No fix listed CWE-787
Priority MEDIUM 48
In gnss service, there is a possible out of bounds write due to improper input validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00217 · Published 2024-07-01 · No fix listed CWE-787
Priority MEDIUM 46
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01778 · Published 2020-11-19 · No fix listed CWE-416
Priority MEDIUM 45
OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that were only supposed t…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02836 · Published 2018-06-19 · No fix listed CWE-732
Priority MEDIUM 41
applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01697 · Published 2021-03-21 · No fix listed CWE-78
Priority MEDIUM 40
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00249 · Published 2026-03-02 · No fix listed CWE-787
Priority MEDIUM 40
In wlan, there is a possible out of bounds write due to a heap buffer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00294 · Published 2026-02-02 · No fix listed CWE-122
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00261 · Published 2025-10-14 · No fix listed CWE-122
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0026 · Published 2025-10-14 · No fix listed CWE-121
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00296 · Published 2025-10-14 · No fix listed CWE-122
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00309 · Published 2025-10-14 · No fix listed CWE-787
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an integer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00296 · Published 2025-10-14 · No fix listed CWE-190
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00307 · Published 2025-10-14 · No fix listed CWE-120
Priority MEDIUM 40
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0036 · Published 2025-07-08 · No fix listed CWE-122
Load more