Read the docs

openwrt

Records169All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high50CVSS 7.0–8.9

Exploited now

openwrt records in CISA KEV

No openwrt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

137 records in Openwrt · all components

Priority HIGH 76

OpenWrt is a Linux operating system targeting embedded devices.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0058 Published 2026-07-15 Fixed in 25.12.5 CWE-117
Priority MEDIUM 45

OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that were only supposed t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02836 Published 2018-06-19 No fix listed CWE-732
TI-2026-16573 CVE-2026-20430 · GHSA-373g-vcw5-hqpv

Out-of-bounds write in MediaTek chipset

Priority MEDIUM 40

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00249 Published 2026-03-02 No fix listed CWE-787
Priority MEDIUM 40

In wlan, there is a possible out of bounds write due to a heap buffer overflow.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00294 Published 2026-02-02 No fix listed CWE-122
Load more
Open these records in search →