importantSYS.SOURCE: The Hacker News• 2026-07-28T18:26:14+05:30

Critical OpenWrt DHCPv6 Stack Overflow Vulnerability Allows Root Code Execution

#vulnerability #openwrt #security #network #exploit

A critical stack overflow vulnerability (CVE-2026-53921) in OpenWrt's DHCPv6 implementation allows unauthenticated attackers to execute arbitrary code as root by exploiting crafted DHCPv6 REQUEST messages. The vulnerability was addressed in OpenWrt 24.10.8 and 25.12.5, with additional security issues in LuCI components still under review.

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default.

The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt's GitHub advisory, lets an unauthenticated attacker able to reach the DHCPv6 server overwrite a stack buffer in odhcpd through a crafted DHCPv6

Read original article

*** END OF TRANSMISSION ***

> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES