Is CVE-2026-72840 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-72840?

CVE-2026-72840 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-72840

Description

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write, which the default busybox crond daemon executes as root within one minute.