Vulnerabilities in openNDS
4 resultsCVE-2026-38820HIGHopenNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on EPSS 2.9%CVE-2026-38822HIGHIn openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulneEPSS 2.3%CVE-2026-38821HIGHA heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal netEPSS 0.3%CVE-2026-38819MEDIUMMultiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memoEPSS 0.3%