CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy Authenticated Command Injection CVE-2026-46368 This repository contains the Proof of Concept PoC exploit for a critical OS command injection vulnerability in luci-app-https-dns-proxy that results in arbitrary command execution as root. CVE ID: CVE-2026-46368...

CVE-2026-101188

A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwdset of the file /ubus. Such manipulation leads to weak password recovery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2026-101188

A security vulnerability exists in Netcore POWER13 version 2.0.240730.162638 . The flaw resides in the routerd.passwd_set function within the /ubus file, which can be manipulated to facilitate weak password recovery . This vulnerability is exploitable remotely , and the exploit has been publicly ...

CVE-2026-101188 Netcore POWER13 ubus routerd.passwd_set password recovery

A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwdset of the file /ubus. Such manipulation leads to weak password recovery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

Exploit for CVE-2026-94095

Netcore NBR200V2 – Remote Command Injection in the Traceroute...

CVE-2026-94050

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

CVE-2026-94050 D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

CVE-2026-94050

An information disclosure vulnerability affects the ubus JSON-RPC interface of the D-Link DIR-X1860Z wireless router (firmware up to 1.0.2.220120.165402). The vulnerable functions are routerd.wificfg_get and routerd.get_rand_key , where manipulation allows an attacker on the local network to retr...

CVE-2026-94050 D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

EUVD-2026-83787

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

PT-2026-96007

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860Z versions prior to 1.0.7.260821.161908 Description An issue exists in the ubus JSON-RPC interface where manipulation of the routerd.wificfg get and routerd.get rand key functions can lead to information disclosure. This attack...

CVE-2026-94050: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

PT-2026-95901

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to 1.0.2.220120.165402 D-Link DIR-X1860Z versions prior to 1.0.2.220120.165402 Description Improper access controls in the routerd component allow an attacker on the local network to bypass security measures. Th...

EUVD-2026-58548

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-72840

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-72840

OpenWrt LuCI exposes an overly permissive ACL in the luci-mod-system-mounts component that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can use ubus file.write to append arbitrary cron ent...

CVE-2026-72840

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-72840 OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-72840: Incorrect Privilege Assignment

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

PT-2026-71903

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...