Skip to content
OpenAdvisories

Product · mossdef-org

luci-app-https-dns-proxy

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-46368 Public exploit

    luci-app-https-dns-proxy Authenticated Command Injection via setInitAction

    luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed and not installed by default — contains a command injection vulnerability in the setInitAct…