Critical DHCPv6 buffer overflow in OpenWrt’s odhcpd enables root takeover
An unauthenticated attacker can send a crafted DHCPv6 REQUEST to OpenWrt’s odhcpd service, overwriting a 512‑byte stack buffer and gaining root code execution on routers. The flaw (CVE‑2026‑53921, CVSS 9.8) is fixed in the 25.12.5 service release, so timely updates are essential.