CVE-2021-27137: DD-WRT Stack-Based Buffer Overflow Vulnerability. DD-WRT

DD-WRT Stack-Based Buffer Overflow Vulnerability. DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.

• CISA KEV-listed (remediation due 2026-07-24)
• EPSS 5.4% (91.9% percentile)
• CVSS 8.1 high

Related briefings

• CISA flags four flaws under active attack, including two in WordPress 2026-07-22

Browse the CVE database

Read the full analysis on IntelFusions