EIP-2026-100870

PRE-CVE

OpenWrt 10.03 - Multiple Cross-Site Scripting Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100870. PoCs published by dave b.

AI-analyzed exploit summary The exploit demonstrates XSS vulnerabilities in OpenWrt by providing example URIs that inject arbitrary JavaScript code. The payloads leverage unsanitized input in the 'stok' and 'query' parameters to execute script code in the context of the affected site.

Description

OpenWrt 10.03 - Multiple Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by dave b · textwebappscgi
https://www.exploit-db.com/exploits/34994

The exploit demonstrates XSS vulnerabilities in OpenWrt by providing example URIs that inject arbitrary JavaScript code. The payloads leverage unsanitized input in the 'stok' and 'query' parameters to execute script code in the context of the affected site.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: OpenWrt 10.03
No auth needed
Prerequisites: Access to the target OpenWrt web interface
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026