Skip to content
OpenAdvisories

Vendor

openwrt

38 known vulnerabilities.

Products

luci 13 openwrt 13 odhcpd 5 uhttpd 3 luci-app-tailscale-community 1 luci-app-banip 1 asu 1 luci-app-adblock-fast 1 luci-app-travelmate 1 travelmate 1 luci-proto-openvpn 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-61876 Public exploit

    LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting

    LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's brows…

    openwrt luci