CVE-2026-68583 is a stored cross-site scripting vulnerability in the luci-app-adblock-fast component of the openwrt luci interface. The flaw allows lower-privileged users to inject malicious HTML code into the blocklist name field. This payload executes in the context of the administrator's browser when viewing the AdBlock Fast status page, potentially leading to unauthorized actions or information disclosure. The vulnerability affects versions prior to 1.2.4-4. No official remediation level or patch information is provided in the available data.

The vulnerability enables lower-privileged users to execute arbitrary HTML/JavaScript code in the administrator's browser session. This can lead to unauthorized actions performed with the administrator's privileges or theft of sensitive information accessible in that session. The impact is limited by the requirement that the administrator must view the compromised status page, and the vulnerability has a medium severity rating (CVSS 5.1). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should upgrade to version 1.2.4-4 or later once available. Until a patch is applied, restrict lower-privileged user access to prevent injection of malicious content into the blocklist name field and limit administrator exposure to untrusted input on the AdBlock Fast status page.