Skip to content
OpenAdvisories

Product · openwrt

luci

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.6
    CVE-2026-62381

    luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow

    luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA key. For a 255-byte signature, the BIT STRING allocation is computed from the DER length …

    openwrt luci
  • Medium 5.4
    CVE-2026-68583

    luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name

    luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field that allows lower-privileged users to inject active HTML. When an administrator views the AdBlock Fast status page, the injected payload exec…

    openwrt luci