Known Vulnerabilities for products from Openwrt
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Openwrt".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-80825 json | Not Provided | 2026-09-04 | 2026-10-19 | |
| CVE-2026-72842 json | Not Provided | 2026-08-13 | 2026-09-30 | |
| CVE-2026-72840 json | Not Provided | 2026-08-13 | 2026-09-30 | |
| CVE-2026-69096 json | Not Provided | 2026-08-03 | 2026-08-14 | |
| CVE-2026-69095 json | Not Provided | 2026-08-03 | 2026-08-14 | |
| CVE-2026-66747 json | Not Provided | 2026-08-05 | 2026-08-05 | |
| CVE-2026-64248 json | Not Provided | 2026-07-24 | 2026-08-17 | |
| CVE-2026-62948 json | OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 3... | Not Provided | 2026-07-15 | 2026-07-21 |
| CVE-2026-62947 json | OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authoriz... | Not Provided | 2026-07-15 | 2026-07-21 |
| CVE-2026-62381 json | Not Provided | 2026-08-22 | 2026-08-24 | |
| CVE-2026-59260 json | Not Provided | 2026-07-12 | 2026-09-30 | |
| CVE-2026-55897 json | Not Provided | 2026-09-21 | 2026-09-21 | |
| CVE-2026-55490 json | OpenWrt is a Linux operating system targeting embedded devices. Before v25.12.5, an integer underflow in handle_send_a() of t... | Not Provided | 2026-07-07 | 2026-07-10 |
| CVE-2026-32721 json | LuCI is the OpenWrt Configuration Interface. Versions prior to both 24.10.5 and 25.12.0, contain a stored XSS vulnerability i... | Not Provided | 2026-03-19 | 2026-04-14 |
| CVE-2025-62526 json | OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffe... | Not Provided | 2025-10-22 | 2026-10-19 |
| CVE-2025-62525 json | OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and ... | Not Provided | 2025-10-22 | 2026-10-19 |
| CVE-2025-20748 json | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat... | Not Provided | 2025-11-04 | 2026-06-17 |
| CVE-2025-20747 json | In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio... | Not Provided | 2025-11-04 | 2026-06-17 |
| CVE-2025-20746 json | In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio... | Not Provided | 2025-11-04 | 2026-06-17 |
| CVE-2025-20742 json | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proxi... | Not Provided | 2025-11-04 | 2026-06-17 |