Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default.

The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt’s GitHub advisory, lets an unauthenticated attacker able to reach the DHCPv6 server overwrite a stack buffer in odhcpd through a crafted DHCPv6

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Show HN: I made Google Trends for Hacker News by indexing 18 years of comments

Show HN: I made Google Trends for Hacker News by indexing 18 years of comments Source: Hacker News

Read More

Summer of Clearinghouses

Summer of Clearinghouses Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 26.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 840 requests (recent log) 34.38.222.238 — 381 requests (recent log) 216.73.217.22 — 286 requests (recent

Read More