{"cve":{"cve_id":"CVE-2026-62184","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00784,"epss_percentile":0.53386,"epss_as_of":"2026-08-26","description":"luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP address into the login username field, causing banIP to block the wrong target while the real attacker remains unblocked.","published_at":"2026-07-13T21:30:09.248000Z","last_modified_at":"2026-07-15T21:02:41.590000Z","cvss_v3_score":7.5,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_v3_severity":"HIGH","cvss_v4_score":8.7,"cvss_v4_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","cvss_v4_severity":"HIGH","ssvc_decision":null,"ssvc_exploitation":"poc","ssvc_automatable":true,"ssvc_technical_impact":"partial","cwes":["CWE-116"],"nvd_references":["https://github.com/openwrt/luci/security/advisories/GHSA-r6hx-4f83-vp8m","https://github.com/openwrt/luci/commit/d9bbc372e29618a8807b693a1ccf6d0e42cd196c","https://www.vulncheck.com/advisories/luci-app-banip-log-monitor-ip-extraction-bypass"],"vuln_status":"Deferred","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-07-13T23:33:20.793949Z","updated_at":"2026-07-17T02:32:55.494432Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"N","value_label":"None"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"AT","name":"Attack Requirements","value":"N","value_label":"None"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"N","value_label":"None"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"N","value_label":"None"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"H","value_label":"High"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"N","value_label":"None"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"N","value_label":"None"},{"metric":"SA","name":"Availability (Subsequent System)","value":"N","value_label":"None"}]},"affected":[{"vendor_slug":"openwrt","vendor_name":"openwrt","product_slug":"luci","product_name":"luci","version_start":"0","version_start_inclusive":true,"version_end":"0.11.1","version_end_inclusive":true,"cpe23_uri":"cve5:openwrt:luci:0:0.11.1"},{"vendor_slug":"openwrt","vendor_name":"openwrt","product_slug":"luci","product_name":"luci","version_start":"d9bbc372e29618a8807b693a1ccf6d0e42cd196c","version_start_inclusive":true,"version_end":"d9bbc372e29618a8807b693a1ccf6d0e42cd196c","version_end_inclusive":true,"cpe23_uri":"cve5:openwrt:luci:d9bbc372e29618a8807b693a1ccf6d0e42cd196c:d9bbc372e29618a8807b693a1ccf6d0e42cd196c"},{"vendor_slug":"openwrt","vendor_name":"openwrt","product_slug":"luci-app-banip","product_name":"luci-app-banip","version_start":"0","version_start_inclusive":true,"version_end":"0.11.1","version_end_inclusive":true,"cpe23_uri":"cve5:openwrt:luci-app-banip:0:0.11.1"},{"vendor_slug":"openwrt","vendor_name":"openwrt","product_slug":"luci-app-banip","product_name":"luci-app-banip","version_start":"d9bbc372e29618a8807b693a1ccf6d0e42cd196c","version_start_inclusive":true,"version_end":"d9bbc372e29618a8807b693a1ccf6d0e42cd196c","version_end_inclusive":true,"cpe23_uri":"cve5:openwrt:luci-app-banip:d9bbc372e29618a8807b693a1ccf6d0e42cd196c:d9bbc372e29618a8807b693a1ccf6d0e42cd196c"}],"exploit_refs":[],"news":[],"references":[{"url":"https://github.com/openwrt/luci/security/advisories/GHSA-r6hx-4f83-vp8m","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://github.com/openwrt/luci/commit/d9bbc372e29618a8807b693a1ccf6d0e42cd196c","source_type":"PATCH","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/luci-app-banip-log-monitor-ip-extraction-bypass","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2026-07-13T21:30:09.248000Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-07-15T19:34:20.784983Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-07-15T19:34:20.784983Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-07-15T19:34:20.784983Z","label":"SSVC decision revised","source":"vulnrichment"}]}