CVE-2026-72842

creationtimestamp| type| source ---|---|--- 2026-08-13 22:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyq57ohte2y 2026-08-14 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117092333945573401 2026-08-14 06:00:28+00:00| seen|...

CVE-2026-72842 OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via /.%2E in the lxcname parameter to escape container directories a...