Beveiligingsadvies

CVE-2026-61876

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-12 12:07:55

Laatst bijgewerkt 2026-07-14 22:03:45

Toegewezen door VulnCheck

CVSS-score 9.4

Status PUBLISHED

Beschrijving

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages.

← Alle CVE's bekijken Bekijk op cve.org ↗