CVE-2026-30874: Partial String Comparison

OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6, a vulnerability in the hotplugcall function allows an attacker to bypass environment variable filtering and inject an arbitrary PATH variable, potentially leading to privilege escalation. The...

OpenWrt 安全漏洞

OpenWrt is an open-source Linux operating system designed for embedded devices. Versions of OpenWrt prior to 24.10.6 contained security vulnerabilities. These vulnerabilities were caused by a bypass of environment variable filtering in the hotplugcall function, which could lead to privilege...