Openwrt

OpenWrt is an embedded Linux distribution and customizable operating system for networking devices such as routers and wireless access points, deployed across a large installed base despite its narrow product scope. The vendor's vulnerability footprint clusters around its core router operating system and related components including the LuCI web interface, LEDE derivative, and the UCI configuration framework, reflecting the diversity of chipsets and embedded platforms that run the distribution. Vulnerabilities affecting OpenWrt skew toward serious outcomes, with a meaningful share reaching critical severity and recurring through memory-safety weakness classes including out-of-bounds reads and writes, buffer overflows, and web-interface input-validation flaws that are characteristic of C-based embedded firmware. The prominence of this vendor in the landscape stems from its presence in countless deployed devices that often operate without timely patching and remain internet-accessible, making OpenWrt disclosures relevant to a broad defensive footprint. Current severity and exploitation activity are shown alongside this summary.