O
Vendor security profile
openwrt
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs33
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
33toplam CVE
Uncertain33 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
33Unknown
Latest vulnerabilities
6.5
6.9
CVE-2026-62381luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow
Patch status unknownEPSS %0
9.4
CVE-2026-72842OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass
Patch status unknownEPSS %1
9.4
CVE-2026-72841luci-app-openvpn Path Traversal RCE via instance_name2
Patch status unknownEPSS %1
8.7
CVE-2026-72840OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write
Patch status unknownEPSS %0
8.7
8.7
CVE-2026-69095OpenWrt luci-app-bmx7 Path Traversal via bmx7-info
Patch status unknownEPSS %1
5.1
CVE-2026-68583luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name
Patch status unknownEPSS %0