Critical OpenWrt DHCPv6 Flaw CVE-2026-53921 Allows Unauthenticated Remote Code Execution as Root
OpenWrt has released versions 24.10.8 and 25.12.5 to patch a critical DHCPv6 stack overflow vulnerability, CVE-2026-53921, rated 9.8 on CVSS 3.1. The…
Tag: LuCI
CVE-2026-62948: OpenWrt DHCPv6 Hostname Injection Leading to Stored XSS
CVE-2026-62948 is a DHCPv6 hostname-injection flaw in OpenWrt that can produce stored cross-site scripting (XSS) when an administrator opens the LuCI leases…
LuCI: OpenWrt Web Interface
LuCI is the default web-based user interface for OpenWrt. An AI-assisted audit by Hacker House identified multiple vulnerabilities in LuCI components, including…