CVE-2026-72841 in LuCIinformazioni

Riassunto

di MITRE • 14/08/2026

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SSH keys in system directories accessible on reboot.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

VulnCheck

Prenotare

10/08/2026

Divulgazione

14/08/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-72841
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72841
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-72841/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!