Critical Open Wrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
OpenWrt released version 24.10.8 to fix CVE-2026-53921, a DHCPv6 stack overflow rated 9.8 on CVSS 3.1 that lets an unauthenticated attacker reaching the DHCPv6 server overwrite a 512-byte stack buffer in odhcpd, which runs as root, via a crafted REQUEST to...