Known exploited vulnerabilities
DD-WRT vulnerabilities attackers have used
Every DD-WRT vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 1 DD-WRT vulnerability as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2021-27137, added Jul 21, 2026. DD-WRT has the most entries (1).
- In KEV, all time
- 1
- Added, last 12 months
- 1
- Used in ransomware
- 0
- New CVEs this week
- 0
Every DD-WRT entry in CISA KEV
CVE-2021-27137
Added · dueDD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.