VulnSocial

CVE-2026-62947Disclosure(openwrt / openwrt)

LOWCVSS 4.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch openwrt openwrt systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization, and rpcd session.c uses fnmatch() without FNM_PATHNAME, allowing traversal such as an allowed wildcard prefix followed by ../ to read root-readable files including /etc/shadow. This vulnerability is fixed in 25.12.5.

openwrt CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openwrt

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-07-15); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
openwrt
Products
openwrt

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-15: 2Mentions · 2026-08-07: 1Patch / Workaround · 2026-08-07: 1Technical Details · 2026-07-15: 2Technical Details · 2026-08-07: 107-1508-07
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-152
Disclosure2
2026-08-071
Patch1
Full discourse3 posts
  • BT Haberler@BTHaberler
    Patch

    OpenWrt'nin DHCPv6 Açığı İçin Yama Yayınlandı, İki Ek Açık Daha Ortaya Çıktı Daha önce duyurduğumuz OpenWrt DHCPv6 açığı CVE-2026-53921 için resmi yama yayınlandı; ayrıca aynı bileşende iki yeni açık daha tespit edildi! • CVE-2026-53921 (CVSS 9,8), odhcpd bileşeninin dhcpv6_ia_handle_IAs() ve build_ia() fonksiyonlarında bulunan 512 baytlık bir tampon taşması; UDP 547 portuna özel hazırlanmış bir DHCPv6 REQUEST paketi göndererek root ayrıcalıklarıyla çalışan bileşende tetiklenebiliyor. • Aynı pakette CVE-2026-62948 (DHCPv6 hostname enjeksiyonu) ve CVE-2026-62947 (path traversal) adlı iki ek açık da kapatıldı. • Birçok yönlendiricide stack koruması ve ASLR bulunmadığından, bu açığın istismarı özellikle gerçekçi kabul ediliyor; kullanıcıların OpenWrt 24.10.8 veya 25.12.5 sürümüne güncelleme yapması gerekiyor. CVE'nin orijinal keşfi yapay zeka destekli bir kod denetiminden gelmişti, şimdi gerçek dünya istismar potansiyeli netleşen bu açık için güncelleme yapmayan yönlendiriciler ciddi risk altında. #SiberGüvenlik #OpenWrt #RCE

    Post summary

    A patch for OpenWrt DHCPv6 CVE‑2026‑53921 has been released, with two additional flaws disclosed; detailed technical information is provided and users are urged to update to the latest firmware.

    0000092
    38 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-62947 OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller'… https://www.cve.org/CVERecord?id=CVE-2026-62947 ----- Traducción: CVE-2026-62947 Ope… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑62947 for OpenWrt, describing a path‑authorization issue in the cgi‑download handler, but provides no evidence of exploitation, tools, or patches.

    0000043
    92 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-62947 OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller'… https://www.cve.org/CVERecord?id=CVE-2026-62947

    Post summary

    The passage references CVE-2026-62947 by pointing out a flaw in OpenWrt’s cgi-download handler before version 25.12.5, but offers no proof of concept, exploit, or mitigation details.

    00000752
    57.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSopenwrtopenwrt---

Explore more

Back to dashboardopenwrt CVEsopenwrt vulnerabilities