CISA added DD-WRT CVE-2021-27137 to KEV. Update builds before 45724, keep router administration private, and disable unnecessary UPnP.