https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:57:28.101029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-379562 EUVD-2026-379562 2026-10-12T06:57:28.145955+00:00 EUVD-2026-379562 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72842 fkie_cve-2026-72842 2026-10-12T06:57:28.145987+00:00

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` parameter to escape container directories and control host-side scripts executed through `lxc.hook.start-host`, achieving root code execution on the OpenWrt host.

 https://cve.radiocsirt.org/vuln/ghsa-q7c4-ghwq-63xh GHSA-q7c4-ghwq-63xh 2026-10-12T06:57:28.146019+00:00

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` parameter to escape container directories and control host-side scripts executed through `lxc.hook.start-host`, achieving root code execution on the OpenWrt host.