Skip to content
OpenAdvisories

Product · openwrt

luci

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-72842

    OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass

    luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` …

    openwrt luci
  • Critical 9.9
    CVE-2026-72841

    luci-app-openvpn Path Traversal RCE via instance_name2

    luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persi…

    openwrt luci