Product by OpenWRT

    OpenWrt LuCI

    18 known vulnerabilities in OpenWrt LuCI (OpenWRT), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenWrt LuCI (OpenWRT)
    HighCVE-2026-69096

    OpenWrt luci-app-dockerman Read ACL Remote Code Execution

    		8.8
    CriticalCVE-2019-12272

    OpenWrt LuCI: Command Injection

    		9.8
    CriticalCVE-2026-61876

    LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting

    		8.8
    HighCVE-2026-69095

    OpenWrt luci-app-bmx7 Path Traversal via bmx7-info

    		7.5
    HighCVE-2026-55897

    OpenWrt LuCI: OS Command Injection

    		8.8
    HighCVE-2026-59260

    OpenWrt luci-app-samba4 read ACL remote code execution via smbd

    		8.8
    CriticalCVE-2026-72842

    OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass

    		9.9
    CriticalCVE-2026-72841

    luci-app-openvpn Path Traversal RCE via instance_name2

    		9.9
    HighCVE-2026-72840

    OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write

    		8.8
    MediumCVE-2020-10871

    OpenWrt LuCI: security vulnerability

    		5.3
    HighCVE-2026-61875

    luci-app-upnp Stored XSS via UPnP Port Mapping Description

    		8.8
    HighCVE-2026-67352

    luci-app-https-dns-proxy Stored XSS via resolver_url

    		7.6
    HighCVE-2026-32721

    LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal

    also in 1 other product

    		8.6
    MediumCVE-2026-62381

    luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow

    		6.6
    MediumCVE-2026-68583

    luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name

    		5.4
    MediumCVE-2021-27821

    OpenWrt LuCI: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2023-24181

    OpenWrt LuCI: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2022-41435

    OpenWrt LuCI: Cross-Site Scripting (XSS)

    		5.4

    News

    All products by OpenWRT