PT-2026-26381 · Openwrt · Openwrt

Aparcar + 2 · Published 2026-03-19 · Updated 2026-03-20 · CVE-2026-30872

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenWrt Project versions prior to 24.10.6 OpenWrt Project versions prior to 25.12.1

Description The OpenWrt Project, a Linux operating system for embedded devices, contains a stack-based buffer overflow in the mdns daemon’s match ipv6 addresses function. This occurs when processing PTR queries for IPv6 reverse DNS domains (.ip6.arpa) received via multicast DNS on UDP port 5353. The issue arises because the strcpy function copies data into a fixed 256-byte stack buffer without proper length validation, and the reverse IPv6 request is extracted into a 46-byte buffer. An attacker can exploit this by sending a crafted DNS query exceeding 46 bytes, leading to an out-of-bounds write and potential remote code execution.

Recommendations Update to OpenWrt Project version 24.10.6 or later. Update to OpenWrt Project version 25.12.1 or later.

Exploit

Fix

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-30872

GHSA-MPGH-V658-JQV5

Affected Products

Openwrt

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30872.json · Exploit
• https://github.com/openwrt/openwrt/security/advisories/GHSA-mpgh-v658-jqv5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30872 · Security Note
• https://osv.dev/vulnerability/CVE-2026-30872 · Vendor Advisory
• https://github.com/openwrt/openwrt/releases/tag/v25.12.1 · Note
• https://github.com/openwrt/openwrt/releases/tag/v24.10.6 · Note
• https://twitter.com/CVEnew/status/2034891619833360785 · Twitter Post
• https://twitter.com/0dayPublishing/status/2034754067033972825 · Twitter Post