CVE-2026-67352— luci-app-https-dns-proxy Stored XSS via resolver_url
Possible ATT&CK Techniques 1AI
T1189 · Drive-by CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-67352
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
luci-app-https-dns-proxy Stored XSS via resolver_url
Source: CVE Program / CVE List V5
Vulnerability Description
luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the administrator's browser origin.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-67352
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
Qwen3.6-35B-A3B · 8314 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-67352
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-67352 (2)
- 🔗 luci-app-https-dns-proxy Stored XSS via resolver_url | Advisories | VulnCheckthird-party-advisory
IV. Related Vulnerabilities
Same product: luci
- CVE-2026-68583
luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url - CVE-2026-61876
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting - CVE-2026-61875
luci-app-upnp Stored XSS via UPnP Port Mapping Description - CVE-2026-59260
OpenWrt luci-app-samba4 read ACL remote code execution via s - CVE-2026-32721
LuCI luci-mod-network: Possible XSS attack in WiFi scan on J
Same vendor: openwrt
- CVE-2026-68583
luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url - CVE-2026-62947
OpenWrt: ACL bypass and arbitrary root file read via cgi-io - CVE-2026-62948
OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can injec - CVE-2026-62184
luci-app-banip Log Monitor IP Extraction Bypass - CVE-2026-61876
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
Same weakness: CWE-79
- CVE-2026-68583
luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url - CVE-2026-12231
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (C - CVE-2026-67328
@better-auth/sso before 1.6.21 Account Takeover via SSO - CVE-2026-67333
better-auth before 1.6.13 Stored XSS via javascript redirect - CVE-2025-71404
better-auth before 1.1.16 Reflected XSS via error parameter
V. Comments for CVE-2026-67352
No comments yet