Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-62948

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefiles_write_state6() and statefiles_write_state4() without escaping, allowing newline injection of forged lease lines that LuCI rpcd-mod-luci getDHCPLeases displays through htdocs/luci-static/resources/view/status/include/40_dhcp.js and htdocs/luci-static/resources/luci.js dom.append as live HTML in the Active DHCPv6 Leases admin page. This vulnerability is fixed in 25.12.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.4%
CVSS Severity
CVSS v3 Score 9.6
Products affected by CVE-2026-62948
  • Openwrt » Openwrt » Version: N/A
    cpe:2.3:o:openwrt:openwrt:-
  • Openwrt » Openwrt » Version: 15.05.1
    cpe:2.3:o:openwrt:openwrt:15.05.1
  • Openwrt » Openwrt » Version: 17.01.0
    cpe:2.3:o:openwrt:openwrt:17.01.0
  • Openwrt » Openwrt » Version: 17.01.1
    cpe:2.3:o:openwrt:openwrt:17.01.1
  • Openwrt » Openwrt » Version: 17.01.2
    cpe:2.3:o:openwrt:openwrt:17.01.2
  • Openwrt » Openwrt » Version: 17.01.3
    cpe:2.3:o:openwrt:openwrt:17.01.3
  • Openwrt » Openwrt » Version: 17.01.4
    cpe:2.3:o:openwrt:openwrt:17.01.4
  • Openwrt » Openwrt » Version: 17.01.5
    cpe:2.3:o:openwrt:openwrt:17.01.5
  • Openwrt » Openwrt » Version: 17.01.6
    cpe:2.3:o:openwrt:openwrt:17.01.6
  • Openwrt » Openwrt » Version: 17.01.7
    cpe:2.3:o:openwrt:openwrt:17.01.7
  • Openwrt » Openwrt » Version: 18.06.0
    cpe:2.3:o:openwrt:openwrt:18.06.0
  • Openwrt » Openwrt » Version: 18.06.1
    cpe:2.3:o:openwrt:openwrt:18.06.1
  • Openwrt » Openwrt » Version: 18.06.2
    cpe:2.3:o:openwrt:openwrt:18.06.2
  • Openwrt » Openwrt » Version: 18.06.3
    cpe:2.3:o:openwrt:openwrt:18.06.3
  • Openwrt » Openwrt » Version: 18.06.4
    cpe:2.3:o:openwrt:openwrt:18.06.4
  • Openwrt » Openwrt » Version: 18.06.5
    cpe:2.3:o:openwrt:openwrt:18.06.5
  • Openwrt » Openwrt » Version: 18.06.6
    cpe:2.3:o:openwrt:openwrt:18.06.6
  • Openwrt » Openwrt » Version: 18.06.7
    cpe:2.3:o:openwrt:openwrt:18.06.7
  • Openwrt » Openwrt » Version: 18.06.8
    cpe:2.3:o:openwrt:openwrt:18.06.8
  • Openwrt » Openwrt » Version: 18.06.9
    cpe:2.3:o:openwrt:openwrt:18.06.9
  • Openwrt » Openwrt » Version: 19.07.0
    cpe:2.3:o:openwrt:openwrt:19.07.0
  • Openwrt » Openwrt » Version: 19.07.1
    cpe:2.3:o:openwrt:openwrt:19.07.1
  • Openwrt » Openwrt » Version: 19.07.10
    cpe:2.3:o:openwrt:openwrt:19.07.10
  • Openwrt » Openwrt » Version: 19.07.2
    cpe:2.3:o:openwrt:openwrt:19.07.2
  • Openwrt » Openwrt » Version: 19.07.3
    cpe:2.3:o:openwrt:openwrt:19.07.3
  • Openwrt » Openwrt » Version: 19.07.4
    cpe:2.3:o:openwrt:openwrt:19.07.4
  • Openwrt » Openwrt » Version: 19.07.5
    cpe:2.3:o:openwrt:openwrt:19.07.5
  • Openwrt » Openwrt » Version: 19.07.6
    cpe:2.3:o:openwrt:openwrt:19.07.6
  • Openwrt » Openwrt » Version: 19.07.7
    cpe:2.3:o:openwrt:openwrt:19.07.7
  • Openwrt » Openwrt » Version: 19.07.8
    cpe:2.3:o:openwrt:openwrt:19.07.8
  • Openwrt » Openwrt » Version: 19.07.9
    cpe:2.3:o:openwrt:openwrt:19.07.9
  • Openwrt » Openwrt » Version: 21.02
    cpe:2.3:o:openwrt:openwrt:21.02
  • Openwrt » Openwrt » Version: 21.02.0
    cpe:2.3:o:openwrt:openwrt:21.02.0
  • Openwrt » Openwrt » Version: 21.02.1
    cpe:2.3:o:openwrt:openwrt:21.02.1
  • Openwrt » Openwrt » Version: 21.02.2
    cpe:2.3:o:openwrt:openwrt:21.02.2
  • Openwrt » Openwrt » Version: 21.02.3
    cpe:2.3:o:openwrt:openwrt:21.02.3
  • Openwrt » Openwrt » Version: 21.02.4
    cpe:2.3:o:openwrt:openwrt:21.02.4
  • Openwrt » Openwrt » Version: 21.02.5
    cpe:2.3:o:openwrt:openwrt:21.02.5
  • Openwrt » Openwrt » Version: 21.02.6
    cpe:2.3:o:openwrt:openwrt:21.02.6
  • Openwrt » Openwrt » Version: 21.02.7
    cpe:2.3:o:openwrt:openwrt:21.02.7
  • Openwrt » Openwrt » Version: 22.03.0
    cpe:2.3:o:openwrt:openwrt:22.03.0
  • Openwrt » Openwrt » Version: 22.03.1
    cpe:2.3:o:openwrt:openwrt:22.03.1
  • Openwrt » Openwrt » Version: 22.03.2
    cpe:2.3:o:openwrt:openwrt:22.03.2
  • Openwrt » Openwrt » Version: 22.03.3
    cpe:2.3:o:openwrt:openwrt:22.03.3
  • Openwrt » Openwrt » Version: 22.03.4
    cpe:2.3:o:openwrt:openwrt:22.03.4
  • Openwrt » Openwrt » Version: 22.03.5
    cpe:2.3:o:openwrt:openwrt:22.03.5
  • Openwrt » Openwrt » Version: 22.03.6
    cpe:2.3:o:openwrt:openwrt:22.03.6
  • Openwrt » Openwrt » Version: 22.03.7
    cpe:2.3:o:openwrt:openwrt:22.03.7
  • Openwrt » Openwrt » Version: 23.05.0
    cpe:2.3:o:openwrt:openwrt:23.05.0
  • Openwrt » Openwrt » Version: 23.05.1
    cpe:2.3:o:openwrt:openwrt:23.05.1
  • Openwrt » Openwrt » Version: 23.05.2
    cpe:2.3:o:openwrt:openwrt:23.05.2
  • Openwrt » Openwrt » Version: 23.05.3
    cpe:2.3:o:openwrt:openwrt:23.05.3
  • Openwrt » Openwrt » Version: 23.05.4
    cpe:2.3:o:openwrt:openwrt:23.05.4
  • Openwrt » Openwrt » Version: 23.05.5
    cpe:2.3:o:openwrt:openwrt:23.05.5
  • Openwrt » Openwrt » Version: 23.05.6
    cpe:2.3:o:openwrt:openwrt:23.05.6
  • Openwrt » Openwrt » Version: 24.10.0
    cpe:2.3:o:openwrt:openwrt:24.10.0
  • Openwrt » Openwrt » Version: 24.10.1
    cpe:2.3:o:openwrt:openwrt:24.10.1
  • Openwrt » Openwrt » Version: 24.10.2
    cpe:2.3:o:openwrt:openwrt:24.10.2
  • Openwrt » Openwrt » Version: 24.10.3
    cpe:2.3:o:openwrt:openwrt:24.10.3
  • Openwrt » Openwrt » Version: 24.10.4
    cpe:2.3:o:openwrt:openwrt:24.10.4
  • Openwrt » Openwrt » Version: 24.10.5
    cpe:2.3:o:openwrt:openwrt:24.10.5
  • Openwrt » Openwrt » Version: 24.10.6
    cpe:2.3:o:openwrt:openwrt:24.10.6
  • Openwrt » Openwrt » Version: 25.12.0
    cpe:2.3:o:openwrt:openwrt:25.12.0
  • Openwrt » Openwrt » Version: 25.12.1
    cpe:2.3:o:openwrt:openwrt:25.12.1
  • Openwrt » Openwrt » Version: 25.12.2
    cpe:2.3:o:openwrt:openwrt:25.12.2
  • Openwrt » Openwrt » Version: 25.12.3
    cpe:2.3:o:openwrt:openwrt:25.12.3
  • Openwrt » Openwrt » Version: 25.12.4
    cpe:2.3:o:openwrt:openwrt:25.12.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved