{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/odhcpd--24.10.8/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-53921"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["odhcpd (\u003c 24.10.8)"],"_cs_severities":["critical"],"_cs_tags":["remote-code-execution","buffer-overflow","network-security","dhcpv6"],"_cs_type":"advisory","_cs_vendors":["OpenWrt"],"content_html":"\u003cp\u003eCVE-2026-53921 is a stack-based buffer overflow vulnerability in the OpenWrt DHCPv6 server component, \u003ccode\u003eodhcpd\u003c/code\u003e. The vulnerability allows an unauthenticated remote attacker to send a specially crafted DHCPv6 REQUEST packet to the server, resulting in memory corruption. This can lead to arbitrary code execution with root privileges or a Denial of Service (DoS) condition. The vulnerability has been confirmed with a CVSS score of 9.8.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthenticated remote code execution with root-level privileges on affected OpenWrt devices. This grants attackers full control over the compromised network device, potentially facilitating lateral movement within the network, traffic interception, or permanent device compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade OpenWrt devices to version 24.10.8 or 25.12.5 and later to incorporate the security patch.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation to restrict DHCPv6 traffic exposure to only authorized and trusted network segments.\u003c/li\u003e\n\u003cli\u003ePrioritize patching for internet-facing gateways or devices providing DHCPv6 services to untrusted network zones.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T07:02:17Z","date_published":"2026-10-22T07:02:17Z","id":"https://feed.craftedsignal.io/briefs/2026-10-openwrt-odhcpd-rce/","summary":"An unauthenticated remote code execution vulnerability (CVE-2026-53921) in the OpenWrt DHCPv6 server component odhcpd allows attackers to execute code with root privileges via crafted DHCPv6 requests.","title":"OpenWrt odhcpd: Stack-based buffer overflow (CVE-2026-53921)","url":"https://feed.craftedsignal.io/briefs/2026-10-openwrt-odhcpd-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Odhcpd (\u003c 24.10.8)","version":"https://jsonfeed.org/version/1.1"}