How many OpenWrt cgi-io CVEs are in CISA KEV?

None of OpenWrt cgi-io's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for OpenWrt cgi-io vulnerabilities?

Yes — 1 of OpenWrt cgi-io's CVEs have a known public exploit.

What are the most common weakness types in OpenWrt cgi-io CVEs?

OpenWrt cgi-io's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

What is the average severity of OpenWrt cgi-io CVEs?

The average CVSS base score across OpenWrt cgi-io's scored CVEs is 4.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

OpenWrt

1 CVEs

OpenWrt cgi-io Vulnerabilities

Name: OpenWrt cgi-io vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for cgi-io by OpenWrt.

1

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

4.9

Avg CVSS

2026–2026

Last updated July 15, 2026

Overview

OpenWrt cgi-io has 1 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 4.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting OpenWrt cgi-io, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of OpenWrt cgi-io's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of OpenWrt cgi-io's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of OpenWrt cgi-io's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every OpenWrt cgi-io version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for OpenWrt cgi-io; the CVEs below apply to the product without a version pin.

1 CVE

Sort

OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download
CVE-2026-62947
Public exploit
Patch
CWE-22
Medium · CVSS 4.9
EPSS 0.4% (28th pct)2026-07-15

Common weakness types

The CWE weakness categories most often found in OpenWrt cgi-io CVEs. Follow any weakness for its full explanation.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Other OpenWrt products

Browse vulnerabilities for other products by OpenWrt.

openwrt137 CVEs luci21 CVEs routing9 CVEs lede2 CVEs asu1 CVEs libuci1 CVEs luci-app-banip1 CVEs luci-app-tailscale-community1 CVEs

All OpenWrt vulnerabilities

Frequently asked questions

Common questions about OpenWrt cgi-io vulnerabilities.

How many CVEs does OpenWrt cgi-io have?: OpenWrt cgi-io has 1 published CVE records since 2026.
How many OpenWrt cgi-io CVEs are in CISA KEV?: None of OpenWrt cgi-io's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for OpenWrt cgi-io vulnerabilities?: Yes — 1 of OpenWrt cgi-io's CVEs have a known public exploit.
What are the most common weakness types in OpenWrt cgi-io CVEs?: OpenWrt cgi-io's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
What is the average severity of OpenWrt cgi-io CVEs?: The average CVSS base score across OpenWrt cgi-io's scored CVEs is 4.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track OpenWrt cgi-io vulnerabilities

Monitor new OpenWrt cgi-io vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing