What is the CVSS score of CVE-2026-20430?

CVE-2026-20430 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openwrt are affected by CVE-2026-20430?

A high-severity vulnerability in wireless access point firmware allows attackers within network proximity to gain elevated system privileges without additional exploits.

How to fix or mitigate CVE-2026-20430?

Within 24 hours: Identify all affected AP models in inventory and assess wireless network exposure; disable non-essential wireless services if possible. Within 7 days: Implement enhanced wireless network segmentation and client isolation; restrict AP management access to hardened jump hosts only; increase monitoring for unusual privilege escalation attempts. Within 30 days: Establish vendor contact for patch timeline and ETA; develop emergency patching procedures; consider temporary replacement hardware for highest-risk locations pending patch availability.

Openwrt CVE-2026-20430

HIGH

Out-of-bounds Write (CWE-787)

2026-03-02 security@mediatek.com

Privilege Escalation Openwrt Software Development Kit

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 02, 2026 - 09:16 nvd

HIGH 8.8

DescriptionCVE.org

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.

AnalysisAI

OpenWrt and its Software Development Kit contain an out-of-bounds write vulnerability in the WLAN access point firmware caused by improper bounds checking, enabling adjacent network attackers to achieve privilege escalation without user interaction or special privileges. The vulnerability carries high severity with complete impact across confidentiality, integrity, and availability, though no patch is currently available.

Technical ContextAI

Classified as CWE-787 (Out-of-bounds Write). Affects Software Development Kit. In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.