PT-2026-71903

CVE-2026-72840

·

Published

2026-08-13

·

Updated

2026-08-13

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write, which the default busybox crond daemon executes as root within one minute.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-266: Incorrect Privilege Assignment
Related identifiers
CVE-2026-72840
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com