Reported vulnerability to contact at openwrt.org, no response yet
Noam Ron
noam at ciphersecuritylabs.com
Tue Jul 14 01:20:50 PDT 2026
Hi,
My name is Noam Ron, im a Security Researcher at Cipher Security Labs.
We reported a security vulnerability to contact at openwrt.org, but
haven't received a response or acknowledgment.
Without going into details here, the issue is high severity, and can
lead to authenticated privilege escalation to root.
We tested against OpenWrt 25.12.4 and have a working PoC ready to
share privately.
We would appreciate it if someone from the security team would take a
look at the original report, or point us to a better contact? Happy to
resend the full report if it got lost.
Thanks,
Noam Ron
More information about the openwrt-adm
mailing list