Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-62947

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization, and rpcd session.c uses fnmatch() without FNM_PATHNAME, allowing traversal such as an allowed wildcard prefix followed by ../ to read root-readable files including /etc/shadow. This vulnerability is fixed in 25.12.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.7%
CVSS Severity
CVSS v3 Score 4.9
Products affected by CVE-2026-62947
  • Openwrt » Openwrt » Version: N/A
    cpe:2.3:o:openwrt:openwrt:-
  • Openwrt » Openwrt » Version: 15.05.1
    cpe:2.3:o:openwrt:openwrt:15.05.1
  • Openwrt » Openwrt » Version: 17.01.0
    cpe:2.3:o:openwrt:openwrt:17.01.0
  • Openwrt » Openwrt » Version: 17.01.1
    cpe:2.3:o:openwrt:openwrt:17.01.1
  • Openwrt » Openwrt » Version: 17.01.2
    cpe:2.3:o:openwrt:openwrt:17.01.2
  • Openwrt » Openwrt » Version: 17.01.3
    cpe:2.3:o:openwrt:openwrt:17.01.3
  • Openwrt » Openwrt » Version: 17.01.4
    cpe:2.3:o:openwrt:openwrt:17.01.4
  • Openwrt » Openwrt » Version: 17.01.5
    cpe:2.3:o:openwrt:openwrt:17.01.5
  • Openwrt » Openwrt » Version: 17.01.6
    cpe:2.3:o:openwrt:openwrt:17.01.6
  • Openwrt » Openwrt » Version: 17.01.7
    cpe:2.3:o:openwrt:openwrt:17.01.7
  • Openwrt » Openwrt » Version: 18.06.0
    cpe:2.3:o:openwrt:openwrt:18.06.0
  • Openwrt » Openwrt » Version: 18.06.1
    cpe:2.3:o:openwrt:openwrt:18.06.1
  • Openwrt » Openwrt » Version: 18.06.2
    cpe:2.3:o:openwrt:openwrt:18.06.2
  • Openwrt » Openwrt » Version: 18.06.3
    cpe:2.3:o:openwrt:openwrt:18.06.3
  • Openwrt » Openwrt » Version: 18.06.4
    cpe:2.3:o:openwrt:openwrt:18.06.4
  • Openwrt » Openwrt » Version: 18.06.5
    cpe:2.3:o:openwrt:openwrt:18.06.5
  • Openwrt » Openwrt » Version: 18.06.6
    cpe:2.3:o:openwrt:openwrt:18.06.6
  • Openwrt » Openwrt » Version: 18.06.7
    cpe:2.3:o:openwrt:openwrt:18.06.7
  • Openwrt » Openwrt » Version: 18.06.8
    cpe:2.3:o:openwrt:openwrt:18.06.8
  • Openwrt » Openwrt » Version: 18.06.9
    cpe:2.3:o:openwrt:openwrt:18.06.9
  • Openwrt » Openwrt » Version: 19.07.0
    cpe:2.3:o:openwrt:openwrt:19.07.0
  • Openwrt » Openwrt » Version: 19.07.1
    cpe:2.3:o:openwrt:openwrt:19.07.1
  • Openwrt » Openwrt » Version: 19.07.10
    cpe:2.3:o:openwrt:openwrt:19.07.10
  • Openwrt » Openwrt » Version: 19.07.2
    cpe:2.3:o:openwrt:openwrt:19.07.2
  • Openwrt » Openwrt » Version: 19.07.3
    cpe:2.3:o:openwrt:openwrt:19.07.3
  • Openwrt » Openwrt » Version: 19.07.4
    cpe:2.3:o:openwrt:openwrt:19.07.4
  • Openwrt » Openwrt » Version: 19.07.5
    cpe:2.3:o:openwrt:openwrt:19.07.5
  • Openwrt » Openwrt » Version: 19.07.6
    cpe:2.3:o:openwrt:openwrt:19.07.6
  • Openwrt » Openwrt » Version: 19.07.7
    cpe:2.3:o:openwrt:openwrt:19.07.7
  • Openwrt » Openwrt » Version: 19.07.8
    cpe:2.3:o:openwrt:openwrt:19.07.8
  • Openwrt » Openwrt » Version: 19.07.9
    cpe:2.3:o:openwrt:openwrt:19.07.9
  • Openwrt » Openwrt » Version: 21.02
    cpe:2.3:o:openwrt:openwrt:21.02
  • Openwrt » Openwrt » Version: 21.02.0
    cpe:2.3:o:openwrt:openwrt:21.02.0
  • Openwrt » Openwrt » Version: 21.02.1
    cpe:2.3:o:openwrt:openwrt:21.02.1
  • Openwrt » Openwrt » Version: 21.02.2
    cpe:2.3:o:openwrt:openwrt:21.02.2
  • Openwrt » Openwrt » Version: 21.02.3
    cpe:2.3:o:openwrt:openwrt:21.02.3
  • Openwrt » Openwrt » Version: 21.02.4
    cpe:2.3:o:openwrt:openwrt:21.02.4
  • Openwrt » Openwrt » Version: 21.02.5
    cpe:2.3:o:openwrt:openwrt:21.02.5
  • Openwrt » Openwrt » Version: 21.02.6
    cpe:2.3:o:openwrt:openwrt:21.02.6
  • Openwrt » Openwrt » Version: 21.02.7
    cpe:2.3:o:openwrt:openwrt:21.02.7
  • Openwrt » Openwrt » Version: 22.03.0
    cpe:2.3:o:openwrt:openwrt:22.03.0
  • Openwrt » Openwrt » Version: 22.03.1
    cpe:2.3:o:openwrt:openwrt:22.03.1
  • Openwrt » Openwrt » Version: 22.03.2
    cpe:2.3:o:openwrt:openwrt:22.03.2
  • Openwrt » Openwrt » Version: 22.03.3
    cpe:2.3:o:openwrt:openwrt:22.03.3
  • Openwrt » Openwrt » Version: 22.03.4
    cpe:2.3:o:openwrt:openwrt:22.03.4
  • Openwrt » Openwrt » Version: 22.03.5
    cpe:2.3:o:openwrt:openwrt:22.03.5
  • Openwrt » Openwrt » Version: 22.03.6
    cpe:2.3:o:openwrt:openwrt:22.03.6
  • Openwrt » Openwrt » Version: 22.03.7
    cpe:2.3:o:openwrt:openwrt:22.03.7
  • Openwrt » Openwrt » Version: 23.05.0
    cpe:2.3:o:openwrt:openwrt:23.05.0
  • Openwrt » Openwrt » Version: 23.05.1
    cpe:2.3:o:openwrt:openwrt:23.05.1
  • Openwrt » Openwrt » Version: 23.05.2
    cpe:2.3:o:openwrt:openwrt:23.05.2
  • Openwrt » Openwrt » Version: 23.05.3
    cpe:2.3:o:openwrt:openwrt:23.05.3
  • Openwrt » Openwrt » Version: 23.05.4
    cpe:2.3:o:openwrt:openwrt:23.05.4
  • Openwrt » Openwrt » Version: 23.05.5
    cpe:2.3:o:openwrt:openwrt:23.05.5
  • Openwrt » Openwrt » Version: 23.05.6
    cpe:2.3:o:openwrt:openwrt:23.05.6
  • Openwrt » Openwrt » Version: 24.10.0
    cpe:2.3:o:openwrt:openwrt:24.10.0
  • Openwrt » Openwrt » Version: 24.10.1
    cpe:2.3:o:openwrt:openwrt:24.10.1
  • Openwrt » Openwrt » Version: 24.10.2
    cpe:2.3:o:openwrt:openwrt:24.10.2
  • Openwrt » Openwrt » Version: 24.10.3
    cpe:2.3:o:openwrt:openwrt:24.10.3
  • Openwrt » Openwrt » Version: 24.10.4
    cpe:2.3:o:openwrt:openwrt:24.10.4
  • Openwrt » Openwrt » Version: 24.10.5
    cpe:2.3:o:openwrt:openwrt:24.10.5
  • Openwrt » Openwrt » Version: 24.10.6
    cpe:2.3:o:openwrt:openwrt:24.10.6
  • Openwrt » Openwrt » Version: 25.12.0
    cpe:2.3:o:openwrt:openwrt:25.12.0
  • Openwrt » Openwrt » Version: 25.12.1
    cpe:2.3:o:openwrt:openwrt:25.12.1
  • Openwrt » Openwrt » Version: 25.12.2
    cpe:2.3:o:openwrt:openwrt:25.12.2
  • Openwrt » Openwrt » Version: 25.12.3
    cpe:2.3:o:openwrt:openwrt:25.12.3
  • Openwrt » Openwrt » Version: 25.12.4
    cpe:2.3:o:openwrt:openwrt:25.12.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved