Openwrt
94 CVEs tracked since 2020. Since Mar 2020, none of them reached CISA KEV.
Openwrt CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2020-03 | 4 | 0 |
| 2020-04 | null or fewer | |
| 2020-05 | null or fewer | |
| 2020-06 | null or fewer | |
| 2020-07 | null or fewer | |
| 2020-08 | null or fewer | |
| 2020-09 | null or fewer | |
| 2020-10 | null or fewer | |
| 2020-11 | null or fewer | |
| 2020-12 | null or fewer | |
| 2021-01 | null or fewer | |
| 2021-02 | null or fewer | |
| 2021-03 | null or fewer | |
| 2021-04 | null or fewer | |
| 2021-05 | null or fewer | |
| 2021-06 | null or fewer | |
| 2021-07 | null or fewer | |
| 2021-08 | null or fewer | |
| 2021-09 | null or fewer | |
| 2021-10 | null or fewer | |
| 2021-11 | null or fewer | |
| 2021-12 | 3 | 0 |
| 2022-01 | null or fewer | |
| 2022-02 | null or fewer | |
| 2022-03 | null or fewer | |
| 2022-04 | null or fewer | |
| 2022-05 | null or fewer | |
| 2022-06 | null or fewer | |
| 2022-07 | null or fewer | |
| 2022-08 | null or fewer | |
| 2022-09 | null or fewer | |
| 2022-10 | null or fewer | |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | null or fewer | |
| 2023-03 | null or fewer | |
| 2023-04 | null or fewer | |
| 2023-05 | 4 | 0 |
| 2023-06 | null or fewer | |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | 11 | 0 |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | null or fewer | |
| 2024-04 | 7 | 0 |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | null or fewer | |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | 5 | 0 |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | null or fewer | |
| 2025-06 | null or fewer | |
| 2025-07 | 13 | 0 |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | 16 | 0 |
| 2025-11 | 16 | 0 |
| 2025-12 | null or fewer | |
| 2026-01 | null or fewer | |
| 2026-02 | null or fewer | |
| 2026-03 | 7 | 0 |
| 2026-04 | null or fewer | |
| 2026-05 | null or fewer | |
| 2026-06 | null or fewer | |
| 2026-07 | 8 | 0 |
Products
The products that kept showing up in Openwrt's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Openwrt.
- CVE-2026-55897luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root8.8
- CVE-2026-55159luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries8.8
- CVE-2026-62381luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow6.6
- CVE-2026-72842OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass9.9
- CVE-2026-72841luci-app-openvpn Path Traversal RCE via instance_name29.9
- CVE-2026-72840OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write8.8
- CVE-2026-69096OpenWrt luci-app-dockerman Read ACL Remote Code Execution8.8
- CVE-2026-69095OpenWrt luci-app-bmx7 Path Traversal via bmx7-info7.5
- CVE-2026-68583luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name5.4
- CVE-2026-67352luci-app-https-dns-proxy Stored XSS via resolver_url7.6
- CVE-2026-62947OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download4.9
- CVE-2026-62948OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI9.6
- CVE-2026-62184luci-app-banip Log Monitor IP Extraction Bypass7.5
- CVE-2026-61876LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting8.8
- CVE-2026-61875luci-app-upnp Stored XSS via UPnP Port Mapping Description8.8
The record
- Peak rank
- #53 in Nov 2025
- Busiest month shown
- Oct 2025, 16 CVEs
- Months with a KEV entry
- 0 since Mar 2020
- Monthly snapshots
- 11 since 2020