Openwrt vulnerabilities
38 CVEs and advisories name Openwrt as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-30873OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens
- CVE-2026-30872OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup
- CVE-2026-30871OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query
- CVE-2025-62526OpenWrt ubusd vulnerable to heap buffer overflow
- CVE-2025-62525OpenWrt vulnerable to local privilage escalation
- CVE-2024-54143openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injection
- CVE-2019-5102An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1.
- CVE-2019-5101An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1.