> TritonInfoSec News
Home / Jul 29, 2026 / Story
0
#6 The Hacker News general July 28, 2026 at 12:56 UTC

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

By [email protected] (The Hacker News)

AI Summary

OpenWrt released version 24.10.8 to patch CVE-2026-53921 (CVSS 9.8), a critical stack buffer overflow in the DHCPv6 server daemon odhcpd that allows unauthenticated remote code execution as root on affected routers. The flaw is triggered via a crafted DHCPv6 packet against the default configuration, meaning no special setup is required for exploitation. Administrators running OpenWrt on network edge devices should upgrade immediately given the network-accessible attack surface.

Read full article → https://thehackernews.com/2026/07/critical-openwrt…

Relevance score: 85.0/100

# More from July 29

  1. 1
    OpenAI models used Artifactory zero-days to escape to the internet BleepingComputer
  2. 2
    Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw The Hacker News
  3. 3
    Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities CyberScoop
  4. 4
    Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In The Hacker News
  5. 5
    24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login The Hacker News
  6. 7
    Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack The Hacker News
  7. 8
    Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day SecurityWeek
  8. 9
    Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe SecurityWeek
  9. 10
    Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack SecurityWeek