Skip to content
Noroxi

openwrt records

145 published records for vendor openwrt.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
2.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

145 records
  • CVE-2024-20017
    53Plan

    In wlan service, there is a possible out of bounds write due to improper input validation.

    CriticalCVSS 9.8Proof of conceptEPSS 47%

    mediatek · software development kitMar 3, 2024

  • CVE-2019-12272
    41Plan

    In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web appl

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    openwrt · luciMay 23, 2019

  • CVE-2020-28951
    40Plan

    libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names.

    CriticalCVSS 9.8No exploitEPSS 2%

    openwrt · openwrtNov 19, 2020

  • CVE-2025-20654
    39Monitor

    In wlan service, there is a possible out of bounds write due to an incorrect bounds check.

    CriticalCVSS 9.8No exploitEPSS 1%

    mediatek · software development kitApr 7, 2025

  • CVE-2025-20674
    39Monitor

    In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check.

    CriticalCVSS 9.8No exploitEPSS 1%

    openwrt · openwrtJun 1, 2025

  • CVE-2025-20681
    39Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    CriticalCVSS 9.8No exploitEPSS 1%

    mediatek · software development kitJul 7, 2025

  • CVE-2025-20683
    39Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    CriticalCVSS 9.8No exploitEPSS 1%

    mediatek · software development kitJul 7, 2025

  • CVE-2025-20682
    39Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    CriticalCVSS 9.8No exploitEPSS 1%

    mediatek · software development kitJul 7, 2025

  • CVE-2024-54143
    38Monitor

    openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injection

    CriticalCVSS 9.3No exploitEPSS 2%

    openwrt · asuDec 6, 2024

  • CVE-2026-30872
    38Monitor

    OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup

    CriticalCVSS 9.5No exploitEPSS 1%

    openwrt · openwrtMar 19, 2026

  • CVE-2026-30871
    38Monitor

    OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query

    CriticalCVSS 9.5No exploitEPSS 1%

    openwrt · openwrtMar 19, 2026

  • CVE-2026-62948
    38Monitor

    OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

    CriticalCVSS 9.6No exploitEPSS 1%

    openwrt · openwrtJul 15, 2026

  • CVE-2018-11116
    36Monitor

    OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call a

    HighCVSS 8.8No exploitEPSS 2%

    openwrt · openwrtJun 19, 2018

  • CVE-2021-28961
    35Monitor

    applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to injec

    HighCVSS 8.8No exploitEPSS 2%

    openwrt · openwrtMar 21, 2021

  • CVE-2019-17367
    35Monitor

    OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, fir

    HighCVSS 8.8No exploitEPSS 1%

    openwrt · openwrtOct 18, 2019

  • CVE-2025-20685
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitJul 7, 2025

  • CVE-2025-20686
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitJul 7, 2025

  • CVE-2025-20711
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitOct 14, 2025

  • CVE-2025-20709
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitOct 14, 2025

  • CVE-2025-20710
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an integer overflow.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitOct 14, 2025

  • CVE-2025-20712
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitOct 14, 2025

  • CVE-2026-20408
    35Monitor

    In wlan, there is a possible out of bounds write due to a heap buffer overflow.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitFeb 2, 2026

  • CVE-2025-20720
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitOct 14, 2025

  • CVE-2025-20719
    35Monitor

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitOct 14, 2025

  • CVE-2026-20430
    35Monitor

    In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 8.8No exploitEPSS 0%

    mediatek · software development kitMar 2, 2026