Product

mossdef-org luci-app-https-dns-proxy vulnerabilities

1 published CVE affecting mossdef-org luci-app-https-dns-proxy, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest mossdef-org luci-app-https-dns-proxy CVEs

Newest publication first

CVE-2026-46368 luci-app-https-dns-proxy Authenticated Command Injection via setInitAction
Published 2026-05-26

HighCVSS 8.7 EPSS 6.6%

luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed and not installed by default — contains a command injection vulnerability in the setInitAction function. An auth...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

mossdef-org luci-app-https-dns-proxy vulnerabilities

Latest mossdef-org luci-app-https-dns-proxy CVEs

CVE-2026-46368 luci-app-https-dns-proxy Authenticated Command Injection via setInitAction