Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP address into the login username field, causing banIP to block the wrong target while the real attacker remains unblocked.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
OpenWRT's luci-app-banip log parsing flaw allows arbitrary IP injection, affecting versions 0 ≤0․11․1 with CVE-2026-62184 https://ift.tt/UT6ORdg
Post summary
The post announces CVE‑2026‑62184 affecting OpenWRT’s luci‑app‑banip, describing an arbitrary IP injection flaw in log parsing but offers no PoC, exploit code, patch, or evidence of active exploitation.