Do Son Discover the controversy surrounding ICANN gTLD applications for the .lan domain. Learn how this impacts OpenWrt and local network configurations worldwide.
OpenWrt
CVE-2026-66747: a Zbtlink router backdoor named ENDLESSDOORS gives unauthenticated remote code execution as root. No fix exists. CVSS 9.8.
OpenWrt released v24.10.4 to fix two high-severity flaws: CVE-2025-62526 allows RCE via a heap buffer overflow in ubusd, and CVE-2025-62525 leaks kernel memory via a DSL driver.
OpenWrt discloses critical vulnerability CVE-2024-54143 that allows attackers to compromise firmware updates. Learn more about this security flaw.
OpenWrt/LEDE is a highly extensible GNU/Linux distribution for embedded devices (typically wireless routers).