What’s Vulnerable › Products

openwrt odhcpd vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your openwrt odhcpd version is affected

Latest openwrt odhcpd vulnerabilities

• CVE-2026-53920 — odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure (CVSS 8.7)
• CVE-2026-55606 — odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp() (CVSS 6.5)
• CVE-2026-53918 — odhcpd DHCPv6 IA dangling first pointer use-after-free (CVSS 8.8)
• CVE-2026-53921 — odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites) (CVSS 9.8)
• CVE-2026-53922 — odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) (CVSS 6.5)