CVE WATCH / VULNERABILITY DETAIL
CVE-2026-91191
HIGHCVSS 7.5NVD feed
Published 29 September 2026 · tracked since 30 September 2026
Description
The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed. Separ
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog