CyberSecBulletin

DD-WRT vulnerabilities

We track 2 vulnerabilities in DD-WRT products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on July 16, 2026.

2vulnerabilities
1critical
1high
1exploited
8.9average CVSS score

Latest DD-WRT vulnerabilities

  • 8.1 High severity

    DD-WRT Stack-Based Buffer Overflow Exploited

    CVE-2021-27137DD-WRTEPSS 4%

    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD

  • 9.8 Critical severity

    DD-WRT: Out-of-bounds Write

    CVE-2022-27631DD-WRTEPSS 1.19%

    A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.