Known exploited vulnerabilities

DD-WRT vulnerabilities attackers have used

Every DD-WRT vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 DD-WRT vulnerability as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2021-27137, added Jul 21, 2026. DD-WRT has the most entries (1).

In KEV, all time
1
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

Every DD-WRT entry in CISA KEV

  1. CVE-2021-27137

    Added · due

    DD-WRT Stack-Based Buffer Overflow Vulnerability

    DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.