{"uuid": "f3dc7c47-a17c-4c8e-aa48-0430f769b69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72841", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117093395688600672", "content": "CVE-2026-72841 (CRITICAL, CVSS 9.4) affects OpenWrt luci-app-openvpn: improper instance_name2 validation enables path traversal and arbitrary file writes, risking persistent root code execution. Restrict access & monitor uploads. https://radar.offseq.com/threat/cve-2026-72841-external-control-of-file-name-or-path-in-openwrt-luci-109c1361849edb55 #OffSeq #OpenWrt #Vuln", "creation_timestamp": "2026-08-14T10:30:26.188652Z"}