Skip to content
OpenAdvisories

Product · openwrt

travelmate

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-58652

    luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter

    luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd session holding the luci-app-travelmate write ACL is granted config-wide UCI write access to the travelmate configuration. While the LuCI UI restricts the auto-l…

    openwrt travelmate luci-app-travelmate