12 matches found
CVE-2026-53921
๐จ CVE-2026-53921 - odhcpd OpenWrt odhcpd ใซใใใ้ๅคงใชในใฟใใฏใใผในใใใใกใชใผใใผใใญใผ ใชใขใผใใใ่ช่จผใชใใงๆช็จๅฏ่ฝใชในใฟใใฏใใผในใใใใกใชใผใใผใใญใผใงใใใrootๆจฉ้ ใซใใใชใขใผใใณใผใๅฎ่ก RCE ใ่จฑใๅฏ่ฝๆงใใใใพใใ ๐ ๆฆ่ฆ โก ่ชฌๆ CVE-2026-53921 ใฏใOpenWrt ใฎ DHCPv6ใตใผใใผ odhcpd ใซๅฝฑ้ฟใไธใใ้ๅคงใชในใฟใใฏใใผในใใใใกใชใผใใผใใญใผ ใงใใ ใชใขใผใใฎ่ช่จผใใใฆใใชใๆปๆ่ ใใ็นๅฅใซ็ดฐๅทฅใใใ DHCPv6 REQUEST...
LuCI DHCPv6 Cross Site Scripting
OpenWrt LuCI suffers from a cross site scripting vulnerability. An unauthenticated adjacent-network attacker can inject malicious HTML/JavaScript via DHCPv6 Client FQDN option 39. The hostname is stored by odhcpd and rendered unsafely via innerHTML in LuCI status tables. Exploit Title: LuCI DHCPv...
CVE-2026-62948
OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefileswritestate6 and statefileswritestate4 without escaping, allowing newline injection of forged lease lin...
CVE-2026-62948
OpenWrt odhcpd/LuCI vulnerability CVE-2026-62948: Before 25.12.5, the DHCPv6 client FQDN option 39 hostname is written into /tmp/odhcpd.leases without escaping, allowing newline injection of forged lease lines. LuCI displays these lines in the Active DHCPv6 Leases page via rpcd-mod-luci getDHCPLe...
CVE-2026-62948 OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname โ stored XSS in the LuCI admin UI
OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefileswritestate6 and statefileswritestate4 without escaping, allowing newline injection of forged lease lin...
PT-2026-60254
Name of the Vulnerable Software and Affected Versions OpenWrt versions prior to 25.12.5 Description The odhcpd component writes a DHCPv6 client FQDN option 39 hostname into the /tmp/odhcpd.leases file via the statefiles write state6 and statefiles write state4 functions without proper escaping...
CVE-2017-17867
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the...
CVE-2017-17867
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the...
CVE-2017-17867
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the...
Design/Logic Flaw
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the...
CVE-2017-17867
CVE-2017-17867 concerns Inteno IOPSYS devices (2.0โ3.14 and 4.0) where remote authenticated users can execute arbitrary OS commands by manipulating the leasetrigger field in the odhcpd config via an SMB share, due to insufficient protection of OpenWrt config (not using /etc/uci-defaults). Connect...
CVE-2017-17867
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the...