Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 05:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

161-73% vs 7-day avg of 598

2 critical, 47 high, 62 medium, 30 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	6.5	CVE-2026-55606	odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt openwrtopenwrt odhcpd	NVD	Oct 23 14:17 UTC
CVE-2026-55606odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt Executive summary This advisory describes a batch of security and correctness fixes in odhcpd, the DHCPv6, DHCPv4 and router-advertisement server used by OpenWrt. Several fixes address memory-safety problems reachable from the network, including out-of-bounds reads and writes and a stack overflow from nested relay messages. The advisory does not state a CVSS score or a severity rating, and it does not state whether any of these issues have been exploited in the wild. Technical summary The fixes cover out-of-bounds stack and buffer reads in DHCPv6 self-loop detection, unbounded nested relay-forward recursion, integer wrap in RELAY_MSG length rewriting, and missing length checks on DHCPv4 options, IA_NA/IA_PD options, CLIENT_ARCH and encapsulated DHCPv4 messages on the 4o6 path, plus NDP Neighbor Solicitation hop-limit and ICMP code checks. A stack overflow in the UCI DNR mandatory SvcParam parser is also fixed, and that issue is reachable through configuration rather than the network. The advisory names no affected or fixed version numbers for odhcpd, and it does not state any workaround. Detection guidance is not stated. The commit history is a set of code changes, so the advisory does not provide a separate list of affected releases. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/openwrt/odhcpd/pull/401 Impact if exploited ConfidentialityLow IntegrityNone AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affects openwrt openwrt odhcpd NIST National Vulnerability DatabasePublished Oct 23, 2026 14:17 UTC Read the advisory
	Critical	9.8	CVE-2026-53921	odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt openwrtopenwrt odhcpd	NVD	Oct 23 14:17 UTC
CVE-2026-53921odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt Executive summary The advisory concerns odhcpd, the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. The text provided is only a source-code diff of a fix in the DHCPv6 IA handling code, and it does not state how serious the flaw is or what the vendor recommends beyond that patch. Technical summary The diff changes dhcpv6_ia_handle_IAs in src/dhcpv6-ia.c so that the Reconfigure Accept handshake length is computed before the check, adds an extra reconfigure-auth structure size for REQUEST messages, and requires buflen to be at least handshake_len before writing the reconfigure option into the buffer. This suggests a bounds-checking flaw in buffer writes, but the advisory does not name the vulnerability class, attack vector, or preconditions. Affected and fixed version numbers are not stated, and no workaround or detection guidance is given. Exploitation status and CVSS score are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/openwrt/odhcpd/commit/032003…b8725c621dd06c36dc03 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects openwrt openwrt odhcpd NIST National Vulnerability DatabasePublished Oct 23, 2026 14:17 UTC Read the advisory
	High	8.7	CVE-2026-53920	odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt openwrtopenwrt odhcpd	NVD	Oct 23 14:17 UTC
CVE-2026-53920odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt Executive summary A flaw in odhcpd, the DHCPv6 and router-advertisement server used by OpenWrt, lets an unauthenticated client on the local network read memory from the server, including a stack canary value. The advisory rates it High severity. It lists no patched versions in its header, but its description also says the issue is fixed in a later commit, so the remediation status needs checking against the vendor. Technical summary The flaw is a stack out-of-bounds read (CWE-125 and CWE-126) in dhcpv6_ia_handle_IAs, where a zero-length or short IA_NA or IA_PD option causes the IAID to be read past an 8192-byte receive buffer, and the bytes are reflected in the DHCPv6 reply. The attacker needs network adjacency on the local IPv6 link and a DHCPv6 client packet with a valid Client Identifier, and no authentication is required. Affected versions are listed as 17.01.0 through 25.12.3. The header states patched versions as None, while the description says the issue is fixed in f2275ef (25.12: 719fc3a), and no fixed release version is stated. The advisory provides a minimal patch that rejects IA options shorter than the header and recommends regression tests. No workaround is stated. Detection guidance is not stated beyond the reproducer. Exploitation in the wild is not stated, and no CVSS score is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/openwrt/odhcpd/security/advi…/GHSA-p769-5v73-pc4f Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects openwrt openwrt odhcpd NIST National Vulnerability DatabasePublished Oct 23, 2026 14:17 UTC Read the advisory
	High	8.8	CVE-2026-53918	odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt openwrtopenwrt odhcpd	NVD	Oct 23 14:17 UTC
CVE-2026-53918odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt Executive summary The advisory covers a code change in odhcpd, the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. The text provided is a source diff with no severity rating, so the advisory does not state how serious the flaw is, and it does not give a specific vendor recommendation beyond the code change itself. Technical summary The diff changes dhcpv6_ia_handle_IAs in src/dhcpv6-ia.c so that a stored pointer to a lease is replaced by a copied 16-byte key and a validity flag, which is used when assigning keys and deciding whether to send a reconfigure. The advisory text does not describe the vulnerability class, attack vector, or preconditions, and it does not state affected versions, fixed versions, workarounds, exploitation status, or a CVSS score. No detection guidance is given. The text contains only the diff and no narrative description of the flaw. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/openwrt/odhcpd/commit/26b122…6aff8f98d428b25e2a93 Impact if exploited ConfidentialityNone IntegrityLow AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects openwrt openwrt odhcpd NIST National Vulnerability DatabasePublished Oct 23, 2026 14:17 UTC Read the advisory
	Medium	6.5	CVE-2026-53922	odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt openwrtopenwrt odhcpd, openwrt	NVD	Oct 12 22:17 UTC
CVE-2026-53922odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt From the advisory odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IA_NA options. An earlier matched IA consumes most of the response buffer, an unmatched IA causes the build_ia() status branch to write and return a NOBINDING response larger than the remaining space, and a subsequent matched IA is processed after dhcpv6_ia_handle_IAs() subtracts that over-return from an unsigned size_t. The resulting underflow disables subsequent length checks and permits attacker-controlled IA_ADDR serialization beyond the 512-byte stack buffer pdbuf in handle_client_request(). The stack canary terminates odhcpd, and sustained packets can repeatedly disrupt DHCPv6 service while procd respawns the process. The observed configuration does not establish code execution. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects openwrt openwrt odhcpd openwrt NIST National Vulnerability DatabasePublished Oct 12, 2026 22:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee