How many OpenWrt luci CVEs are in CISA KEV?

None of OpenWrt luci's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of OpenWrt luci are affected?

47 distinct OpenWrt luci versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in OpenWrt luci CVEs?

OpenWrt luci's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-73 (External Control of File Name or Path), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical OpenWrt luci vulnerabilities are there?

OpenWrt luci has 5 critical and 15 high-severity CVEs.

What is the average severity of OpenWrt luci CVEs?

The average CVSS base score across OpenWrt luci's scored CVEs is 7.7.

OpenWrt luci Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: OpenWrt luci vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

OpenWrt luci Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

OpenWrt luci has 31 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 21 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

Severity and exploitation

How the CVSS severity of OpenWrt luci's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High15

Medium11

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of OpenWrt luci's CVEs are currently listed in CISA's KEV catalog.

Public exploits

21 of OpenWrt luci's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every OpenWrt luci version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.11.02 CVEs
0.10.01 CVE
0.11.11 CVE

Version ranges

< 24.10.82 CVEs
<= 24.10.82 CVEs
25.12.0 <= v < 25.12.52 CVEs
25.12.0 <= v <= 25.12.52 CVEs
< 1.1.2-61 CVE
< 1.2.4-41 CVE
< 24.10.71 CVE
< 26.072.65753-068150b1 CVE

Common weakness types

The CWE weakness categories most often found in OpenWrt luci CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many OpenWrt luci CVEs were published each year.

2019

2020

2021

2022

2023

2024

2026

Other OpenWrt products

Browse vulnerabilities for other products by OpenWrt.

openwrt138 CVEs routing9 CVEs lede2 CVEs odhcpd2 CVEs asu1 CVEs cgi-io1 CVEs libuci1 CVEs luci-app-adblock-fast1 CVEs

All OpenWrt vulnerabilities

Frequently asked questions

Common questions about OpenWrt luci vulnerabilities.

How many CVEs does OpenWrt luci have?: OpenWrt luci has 31 published CVE records since 2019.
How many OpenWrt luci CVEs are in CISA KEV?: None of OpenWrt luci's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for OpenWrt luci vulnerabilities?: Yes — 21 of OpenWrt luci's CVEs have a known public exploit.
Which versions of OpenWrt luci are affected?: 47 distinct OpenWrt luci versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in OpenWrt luci CVEs?: OpenWrt luci's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-73 (External Control of File Name or Path), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical OpenWrt luci vulnerabilities are there?: OpenWrt luci has 5 critical and 15 high-severity CVEs.
What is the average severity of OpenWrt luci CVEs?: The average CVSS base score across OpenWrt luci's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track OpenWrt luci vulnerabilities

Get an alert for each new OpenWrt luci CVE, with AI-written analysis and remediation steps.

Create an account See pricing

OpenWrt luci Vulnerabilities