ExploitPublished
OpenWrt 23.05 · Authenticated Remote Code Execution (RCE)
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 5 May 2026, 07:48 UTC
What to do
AI-suggested
Until an official fix is available, restrict access to the management interface to trusted users only and monitor for suspicious activity.
Description
OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
Indicators of compromise
Exploit source code
# Exploit Title: OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
# Date: 2026-01-17
# Exploit Author: Ahmet Mersin
# Vendor Homepage: https://github.com/stangri/luci-app-https-dns-proxy
# Software Link: https://github.com/stangri/luci-app-https-dns-proxy
# Version: All versions prior to 2026-01-17
# Tested on: OpenWrt 23.05
# CVE : Pending
"""
OpenWrt luci-app-https-dns-proxy Root Takeover Exploit
CVE-202X-XXXXX - Local Privilege Escalation via Command Injection
import requests
impo…References
Community reviews
Loading reviews…