TI-2026-25213 CVE-2026-32721
LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
Priority LOW 39
LuCI is the OpenWrt Configuration Interface.
Vulnerabilities
6 records
TI-2023-09913 CVE-2023-24181
LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected…
Priority MEDIUM 58
LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm.
TI-2022-19894 CVE-2022-41435 · GHSA-2pp5-7m97-7f6x
OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored…
Priority MEDIUM 58
OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js.
TI-2021-09199 CVE-2021-27821 · GHSA-4r8j-5v22-gg78
The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a…
Priority LOW 28
The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability.
TI-2020-08756 CVE-2020-10871 · GHSA-hcgf-6hm9-4pgw
In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of…
Priority LOW 27
In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services.
TI-2019-09158 CVE-2019-12272 · GHSA-4g44-5j4j-c7x6
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and…
Priority MEDIUM 52
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.