CVE-2026-61875

HIGH SEVERITY

CVSS Score & Metrics

Base Score

8.8 / 10

Vector String

                                        CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H                                    

Vulnerability Description

luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.

Vulnerability Details

Published Date

July 12, 2026

Last Modified

July 12, 2026

CWE ID

CWE-79

Source

NVD

Vendor

openwrt

Product

luci

External References

https://github.com/openwrt/luci/security/advisories/GHSA-8v49-6387-7f89
https://www.vulncheck.com/advisories/luci-app-upnp-stored-xss-via-upnp-port-mapping-description

CVE-2026-61875

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment