openwrt security advisories
5 threat alerts tracking vulnerabilities and security advisories that affect openwrt products.
Vulnios monitors openwrt CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent openwrt security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-30871 — openwrt — openwrt
OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6 and 25.12.1, the mdns daemon has a Stack-based Buffer Overflow vulnerability in the parse_question
criticalCVE-2026-30871Critical Vulnerability: CVE-2026-30872 — openwrt — openwrt
OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6 and 25.12.1, the mdns daemon has a Stack-based Buffer Overflow vulnerability in the match_ipv6_addr
criticalCVE-2026-30872Critical Vulnerability: CVE-2026-62948 — openwrt — openwrt
OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefiles_writ
criticalCVE-2026-62948Critical Vulnerability: CVE-2020-28951 — openwrt — openwrt
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.
criticalCVE-2020-28951Critical Vulnerability: CVE-2019-12272 — openwrt — luci
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.
criticalCVE-2019-12272
Track openwrt exposure across your environment
Vulnios automatically cross-references your asset inventory against new openwrt CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan