CVE-2026-38822highCWE-78

CVE-2026-38822: high-severity vulnerability in openNDS

Published

Follow this CVE+ Monitor openNDS+ Monitor opennds

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.6epss 2.3%
In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by embedding semicolons in a URL query parameter name.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Affected products
openNDS · openNDS
Related CVEs — openNDS

In the same product, most dangerous first.

CVE-2026-38820HIGHCVE-2026-38820EPSS 2.9%CVE-2026-38821HIGHCVE-2026-38821EPSS 0.3%CVE-2026-38819MEDIUMCVE-2026-38819EPSS 0.3%