Skip to content
Threat Feed
Subscribe

Tag

Dhcpv6

3 briefs RSS
critical advisory

OpenWrt odhcpd: Stack-based buffer overflow (CVE-2026-53921)

An unauthenticated remote code execution vulnerability (CVE-2026-53921) in the OpenWrt DHCPv6 server component odhcpd allows attackers to execute code with root privileges via crafted DHCPv6 requests.

odhcpd remote-code-execution buffer-overflow network-security dhcpv6
2t 1c
high advisory

LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting Vulnerability (CVE-2026-61876)

LuCI versions are vulnerable to CVE-2026-61876, a stored Cross-Site Scripting (XSS) flaw in their DHCPv6 lease hostname rendering logic, allowing an adjacent network attacker to inject malicious HTML markup that executes in an administrator's browser when viewing DHCP lease status pages.

PoC LuCI xss web-vulnerability network-device router dhcpv6
1t 1c updated
critical advisory

BusyBox DHCPv6 Client Heap Buffer Overflow Vulnerability (CVE-2026-29004)

A heap buffer overflow vulnerability in BusyBox's DHCPv6 client allows network-adjacent attackers to trigger memory corruption, denial of service, or arbitrary code execution via crafted DHCPv6 responses.

BusyBox heap-overflow dhcpv6 cve-2026-29004 denial-of-service
2r 2t 1c