https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T09:10:02.391400+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-72842 fkie_cve-2026-72842 2026-10-02T09:10:02.409937+00:00

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` parameter to escape container directories and control host-side scripts executed through `lxc.hook.start-host`, achieving root code execution on the OpenWrt host.

 https://db.gcve.eu/vuln/ghsa-q7c4-ghwq-63xh GHSA-q7c4-ghwq-63xh 2026-10-02T09:10:02.410017+00:00

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` parameter to escape container directories and control host-side scripts executed through `lxc.hook.start-host`, achieving root code execution on the OpenWrt host.