CVE-2026-32721

MEDIUM EPSS 14.9%
Published Mar 19, 20263mo ago · Modified Jun 17, 20261w ago
4.8 CVSS 3.1
Medium
Find Similar
Published Mar 19, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago

Description

LuCI is the OpenWrt Configuration Interface. Versions prior to both 24.10.5 and 25.12.0, contain a stored XSS vulnerability in the wireless scan modal, where SSID values from scan results are rendered as raw HTML without any sanitization. The wireless.js file in the luci-mod-network package passes SSIDs via a template literal to dom.append(), which processes them through innerHTML, allowing an attacker to craft a malicious SSID containing arbitrary HTML/JavaScript. Exploitation requires the user to actively open the wireless scan modal (e.g., to connect to a Wi-Fi access point or survey nearby channels), and only affects OpenWrt versions newer than 23.05/22.03 up to the patched releases (24.10.6 and 25.12.1). The issue has been fixed in version LuCI 26.072.65753~068150b.

CVSS Details

Base Score
4.8
Exploitability
1.7
Impact
2.7
Vector string
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector Adjacent
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Changed
Confidentiality Low
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
14.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 3

VendorProductVersionRange
openwrtluci* <26.072.65753-068150b
openwrtopenwrt* <24.10.6
openwrtopenwrt*≥25.12.0  –  <25.12.1

References 3

  • github.com https://github.com/openwrt/luci/commit/068150ba5f524ef6b03817b258d31ec310053fd6
    Patch
  • github.com https://github.com/openwrt/luci/commit/cdce600aaec66f762f18d608c74cbf3abcafe1c7
    Patch
  • github.com https://github.com/openwrt/luci/security/advisories/GHSA-vvj6-7362-pjrw
    PatchVendor Advisory

Remediation

  • github.com https://github.com/openwrt/luci/commit/068150ba5f524ef6b03817b258d31ec310053fd6
    Patch
  • github.com https://github.com/openwrt/luci/commit/cdce600aaec66f762f18d608c74cbf3abcafe1c7
    Patch
  • github.com https://github.com/openwrt/luci/security/advisories/GHSA-vvj6-7362-pjrw
    PatchVendor Advisory