0dayNews — DD-WRTDD-WRT is an open-source firmware for consumer and SOHO wireless routers, running on hardware from a range of manufacturers. Coverage tracks CVEs against DD-WRT's own daemons — UPnP/SSDP, the httpd web UI, and network services — that reach the CISA KEV catalog or otherwise show up in unpatched-population telemetry. Combined article + CVE feed for the DD-WRT beat.https://0daynews.com/en-usCVE-2021-27137 — DD-WRT SSDP Stack-Based Buffer Overflow (UPnP)https://0daynews.com/cve/cve-2021-27137/https://0daynews.com/cve/cve-2021-27137/An unsafe strcpy in DD-WRT's SSDP handling lets an unauthenticated attacker overflow an internal buffer via the UPnP listener and trigger code execution. Added to CISA KEV on 2026-07-21.Thu, 03 Sep 2026 00:00:00 GMTDD-WRThighcveDD-WRT UPnP flaw CVE-2021-27137 added to CISA KEVhttps://0daynews.com/articles/2026-07-21-cisa-kev-dd-wrt-cve-2021-27137-upnp-ssdp-strcpy-r45724/https://0daynews.com/articles/2026-07-21-cisa-kev-dd-wrt-cve-2021-27137-upnp-ssdp-strcpy-r45724/CISA added DD-WRT's 2021 SSDP-parsing buffer overflow to KEV on 2026-07-21. Unauthenticated attackers can reach it on routers with UPnP left enabled.Tue, 21 Jul 2026 19:15:00 GMTDD-WRTarticle