CVE-2026-72840
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Aug 13, 2026
Vendor
unknown
Description
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write, which the default busybox crond daemon executes as root within one minute.