Sploitus

24 exploited vulnerabilities in Openwrt

Vulnerabilities with publicly known exploits

Vendors
Openwrt, Zbtlink, Vera, Inteno, Vrx518, Lantiq
With known exploits
24
Affected Openwrt versions
< 24.10.6, 25.12.1, 25.12.5, 24.10.4, 18.06.7, 19.07.0, 15.05.1, 18.06.4, 22.03.3, 18.06.1, 21.02.1
Affected Getvera Veraedge Firmware versions
≤ 1.7.19
Affected Intenogroup Iopsys versions
≤ 3.14, 4.0
Affected Openwrt Lede versions
≤ 17.01.7, 17.01
Affected Openwrt Libuci versions
All versions
Affected Openwrt Luci versions
= git-22.140.66206-02913be
Affected Opennds Captive Portal versions
< 10.1.2

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-66747 2 exploits
CVSS 9.8 CRITICAL 2026-08-05
CVE-2026-30872
CVSS 9.8 CRITICAL 2026-03-19FIX AVAILABLE
CVE-2026-30871
CVSS 9.8 CRITICAL 2026-03-19FIX AVAILABLE
CVE-2017-9385
CVSS 9.8 CRITICAL 2019-06-17
CVE-2026-62948
CVSS 9.6 CRITICAL 2026-07-15FIX AVAILABLE
CVE-2024-54143
CVSS 9.3 CRITICAL 2024-12-06FIX AVAILABLE
CVE-2017-17867 5 exploits
CVSS 9.0 HIGH 2018-01-04FIX AVAILABLE
CVE-2025-62525
CVSS 8.8 HIGH 2025-10-21FIX AVAILABLE
CVE-2020-7982 2 exploits
CVSS 8.1 HIGH 2020-02-01FIX AVAILABLE
CVE-2025-62526
CVSS 7.9 HIGH 2025-10-21FIX AVAILABLE
CVE-2026-30874
CVSS 7.8 HIGH 2026-03-19FIX AVAILABLE
CVE-2019-15513
CVSS 7.8 HIGH 2019-08-23FIX AVAILABLE
CVE-2019-5101
CVSS 5.9 MEDIUM 2019-09-11FIX AVAILABLE
CVE-2026-55490
CVSS 6.5 MEDIUM 2026-07-07FIX AVAILABLE
CVE-2023-24182
CVSS 5.4 MEDIUM 2023-04-11FIX AVAILABLE
CVE-2022-41435
CVSS 5.4 MEDIUM 2022-09-21
CVE-2018-19630
CVSS 6.1 MEDIUM 2018-11-28FIX AVAILABLE
CVE-2019-5102
CVSS 5.9 MEDIUM 2019-09-11FIX AVAILABLE
CVE-2021-45906
CVSS 5.4 MEDIUM 2021-12-23
CVE-2019-25015
CVSS 5.4 MEDIUM 2021-01-21
CVE-2021-45904
CVSS 5.4 MEDIUM 2021-12-27
CVE-2021-45905
CVSS 5.4 MEDIUM 2021-12-27FIX AVAILABLE
CVE-2023-38324
CVSS 5.3 MEDIUM 2023-11-17FIX AVAILABLE
CVE-2026-62947
CVSS 4.9 MEDIUM 2026-07-15FIX AVAILABLE